News for hackers. Stuff that matters.
Re:AWS Support able to access any S3 object due to permissio... by guitarbill on Thursday December 23, 2021 @11:41AM (#29663533)
The code says it uses the public key for uploading/encryption, and the private key for downloading/decryption. It's useful to be able to split writing and reading with cryptographic guarantees, for security or organisational purposes. E.g. if a client only has the public key and should it be compromised, it can't read the data. Or it allows you to have less strict access controls on uploading clients.

There are no comments on this comment yet.