summaryrefslogtreecommitdiff
path: root/doc/design/encryption
diff options
context:
space:
mode:
authorGravatar https://www.google.com/accounts/o8/id?id=AItOawl9sYlePmv1xK-VvjBdN-5doOa_Xw-jH4U <Richard@web>2011-04-03 20:03:14 +0000
committerGravatar admin <admin@branchable.com>2011-04-03 20:03:14 +0000
commit218c58f3c9d08e981a4dbade8aa9c9acc0facaf1 (patch)
tree973648f77a09efab1b542e6af8b15855373959e4 /doc/design/encryption
parent6fd8efbc3cc754f574c022f325e8a442fe5cb02c (diff)
Added a comment
Diffstat (limited to 'doc/design/encryption')
-rw-r--r--doc/design/encryption/comment_1_4715ffafb3c4a9915bc33f2b26aaa9c1._comment12
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/design/encryption/comment_1_4715ffafb3c4a9915bc33f2b26aaa9c1._comment b/doc/design/encryption/comment_1_4715ffafb3c4a9915bc33f2b26aaa9c1._comment
new file mode 100644
index 000000000..f2ecc46d0
--- /dev/null
+++ b/doc/design/encryption/comment_1_4715ffafb3c4a9915bc33f2b26aaa9c1._comment
@@ -0,0 +1,12 @@
+[[!comment format=mdwn
+ username="https://www.google.com/accounts/o8/id?id=AItOawl9sYlePmv1xK-VvjBdN-5doOa_Xw-jH4U"
+ nickname="Richard"
+ subject="comment 1"
+ date="2011-04-03T20:03:14Z"
+ content="""
+New encryption keys could be used for different directories/files/patterns/times/whatever. One could then encrypt this new key for the public keys of other people/machines and push them out along with the actual data. This would allow some level of access restriction or future revocation. git-annex would need to keep track of which files can be decrypted with which keys. I am undecided if that information needs to be encrypted or not.
+
+Encrypted object files should be checksummed in encrypted form so that it's possible to verify integrity without knowing any keys. Same goes for encrypted keys, etc.
+
+Chunking files in this context seems like needless overkill. This might make sense to store a DVD image on CDs or similar, at some point. But not for encryption, imo. Coming up with sane chunk sizes for all use cases is literally impossible and as you pointed out, correlation by the remote admin is trivial.
+"""]]