3
$\begingroup$

What is the most secure way to let Alice "input" her private key, transfer it to the server and decrypt the message? (Then destroy the private key on the server)

Every connection is using SSL.

Exmeple:

Alice log on the website. She have a new "email" from Bob. (Everything is stored in a database, it's not an actual email)

To read it, she needs her private key. How can she do that ? Upload it? Copy the key in a textbox and click submit? (May not be pratical for Alice) Store it on the server (Hugh security issue) ?

(And is it possible to suggest me some keywords please? I'm not used to Crypto.Stackexchange Thank you)

Improve this question
$\endgroup$

1 Answer 1

Reset to default
3
$\begingroup$

What you really want to do is never have any unencrypted data leave the server in the first place. What should be happening is that the server is sending the encrypted message to Alice, who then decrypts it locally.

Improve this answer
$\endgroup$
0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.