Re:AWS Support able to access any S3 object due to permissio...
by L0g4n on Thursday December 23, 2021 @09:07AM
(#29661903)
Just skimmed it, looks useful, with mentioning keypair I'm assuming they use RSA keys or something similar. Why the choice for asymmetric encryption?
[ Parent
| on HN ]
Re:AWS Support able to access any S3 object due to permissio...
by guitarbill on Thursday December 23, 2021 @11:41AM
(#29663533)
The code says it uses the public key for uploading/encryption, and the private key for downloading/decryption. It's useful to be able to split writing and reading with cryptographic guarantees, for security or organisational purposes. E.g. if a client only has the public key and should it be compromised, it can't read the data. Or it allows you to have less strict access controls on uploading clients.