Quote:
Originally Posted by Fbone
Everything is encrypted locally before uploading. You send the download link to someone else. How can they download it without the encryption key?
|
Without looking at the details of how mega.co.nz works, they are feasible ways how you can support multiple encryption keys for the same content, for example using a two level encryption hierarchy (
see here (PDF)).
With something like this, the original uploader could add a temporary password, allowing someone else to decrypt the content, and have the password later removed again. For that to work with online storage like mega.co.nz, without sharing the actual password with the hoster, one would have to be able to modify the header of the encrypted content without having to reupload everything again.