News for hackers. Stuff that matters.
Re:Key to Simplicity: Squeezing the hassle out of encryption... by ggm on Tuesday April 09, 2024 @09:47PM (#39986184)
It's a shame key escrow has become a tainted concept, mired in "government has my keys" because a mechanism to store offline a cold copy of keying material and recover it is a good thing to have available.
Re:Key to Simplicity: Squeezing the hassle out of encryption... by imperiopolis on Tuesday April 09, 2024 @10:51PM (#39986511)
Making encryption more convenient for everyone is definitely a good thing. Some people will always have that paranoia around letting keys out of their hand, but for the rest of us this protocol aims to reduce the need to trust any one service with your key material by distributing it across independent distrusting services.
Re:Key to Simplicity: Squeezing the hassle out of encryption... by throwiforgtnlzy on Wednesday April 10, 2024 @01:01AM (#39987121)
"Key escrow" by encrypting secrets yourself with trusted tools and storing the result in various object stores. Problem solved.

Also solved by on-prem secrets and password managers without cloud features or dial-home.

Trusting a new third-party with their new and likely unproven construction is a recipe that has failed spectacularly over and over again.

It's possible, but it's very, very difficult and, like email or DNS, becomes a kind of commoditized utility that rarely/never changes.