Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You're forgetting that if I have been storing all of the encrypted traffic all along and then get access to the keys I can unlock all of the history too. Once a secret is out of use it should be purged completely. This is why secrets should be stored on ephemeral storage if at all possible. This is however pretty advance for many people.


This is solved with perfect forward secrecy: https://en.m.wikipedia.org/wiki/Forward_secrecy


Great! It's "solved". No need to worry anymore!




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: