BrowserID Key Wrapping: Difference between revisions

BrowserID Key Wrapping (view source)

309 bytes added , 7 January 2012

668

edits

Revision as of 01:14, 7 January 2012 (view source) BenAdida (talk \| contribs) (→‎Security Considerations) ← Older edit		Revision as of 01:15, 7 January 2012 (view source) BenAdida (talk \| contribs) (→‎Further Work) Newer edit →
Line 67:		Line 67:

	== Further Work ==		== Further Work ==

			Currently, if the user loses their password and must reset it, the user key UK might as well be thrown away, and data encrypted against that key is thus lost for good. In future work, we may evaluate a key escrow mechanism by which the key can be recovered, somehow. This is considered out of scope for now.