top | item 46366903

(no title)

fiso64 | 2 months ago

How do you prevent people from using their keys to set up servers that remotely provide tokens to anyone?

discuss

order

Nevermark|2 months ago

I don’t have a full design out of the blue.

But as design criteria go, that is certainly a sensible one to include.

Just a random first idea, the key effectively auto updates, I.e it’s a time varying key chain. I can think of several ways to do that, so the time varying nature can’t be replicated by someone else without the same originating account. But couldn’t say if any were good or not. It is something to design carefully, as all cryptographic systems need to be.

Other criteria would be easy revocation by the original key holder. Keys that are created from any multiple number of independent accounts, blind to each other, that the key recipient chooses.

Again, just throwing out first thoughts.