Matt Cockayne on Mythryl: “Two encrypted emails in twenty years, and the usual way a published…”

Two encrypted emails in twenty years, and the usual way a published PGP key fails is that its private half rots. A walkthrough where there's no private key anywhere to lose: gpg encrypts to a cert whose secrets live in KMS, and you read it back. #OpenPGP #AWS

phpboyscout.ukRead the report without ever holding the keyBuild a publishable OpenPGP certificate whose private halves never leave AWS KMS, then decrypt a real report to it in about twenty minutes.

24/10/26, 9:11 am0 reposts0 likes

Post