With asymmetric encryption there are 2 keys - 1 is public (= everyone can look it up) and 1 is private (only the receiver has that key). Those are mathematically related.
When I send a message, I use the receivers Public key to encrypt the message - so that message is only decryptable with the private key, so the recipient alone can decrypt it.
How is the recipient the only one with a private key? If the key is sent with the message, then how does it determine the recipient? Couldn’t someone spoof the recipient’s credentials? What credentials are used to determine the proper recipient?
The private key never leaves the one it belongs to - if it does, then the encryption isn‘t secure anymore. If keys are sent, then the public ones, which are ‚public‘ (e.g. let me send you my public key, so you can send encrypted messages to me).
When you create a key pair, you get which the private and which the public one is. Keep your private key, private and you‘re the only holdener.
For advanced security, the messages (e.g. E-Mails) are secured on top with TLS, which encrypts the message on its way. If there‘s a man-in-the-middle attack, he would just see the encrypted message with no key to decrypt it.
Imagine a lock that requires 2 keys to work. One, the public key, can only lock it. The other, the private key, can only unlock it.
It’s safe to share the public key since anything it locks can only be opened with the private key. So every interaction you have that needs to be kept hidden, you send out a copy of your public key, and only your private key allows you to read the message.
Credentials are irrelevant. If you need to communicate with someone else, you send your key, they send theirs back. Anything you lock with their public key, only their private key will access.
Lets say we wanna talk. I keep a private decryption key and send you a (public) encryption key. Everyone now knows how to encrypt a message for me but nobody, not even you, can read it. The decryption ley is NEVER SENT and kept secret, the encryption key is public but can never decrypt anything.
The recipient is the only one with the private key because they generate the private key (simultaneously with the public key) on their own computer and then they don’t give anyone else a copy.
There is no mechanism per se that ensures only the recipient receives the encrypted message. But only someone with the private key can decrypt it.
You are talking about the Alice and Bob situations.
Alice has a pair of keys. Private and public.
Bob has a pair of keys private and public.
Bob and Alice swap public keys.
Alice uses bobs public key to encrypt a message, when Bob receives the message he uses his private key to decrypt the message.
The private keys that do the decryption are never swapped. Only the public key are swapped which allow encryption.
If some else has bobs public key, they can not decrypt a message because the key they intercepted is used for encryption.
There is also another method called a Diffie-Hellman exchange. Where Bob and allice still swap public keys but Bob uses his private key and allices public key to do a maths equation to get a secret. Allice will use her private key and bobs public key doing the same math equations will result in the same number.
So the secret was never shared between them they both did the same equation and came to the same result.
To the person who flagged this NSFW because of the language, you probably will not last long on Lemmy if “clit” and “dick” (misspelled) are too not safe for where you work.
No one is saying those words to coworkers. They’re looking at a meme with words that really aren’t that bad in a forum with shit in the title and complaining about words on a screen that aren’t appropriate at work. Like the word shit.
Information that should be taught in school heath classes. It makes me queasy how often I have seen this from organizations and unscrupulous people in the wild. Happens a lot on campuses and wherever a lot of people are ‘new’ to an area or otherwise vulnerable socially. Predatory shit.
It’s not more private. It’s more free. Meaning it’s harder to cut someone’s voice out of the conversation, because the conversation is administered across many different instances.
I’d love supported GUI apps for pacman and systemd. I know there are GUI’s out there for them, but they are not supported by the main project, so they don’t count.
You can’t get support from lemmy.linuxuserspace.show or any other website if there’s a bug in your web browser. You can’t get support from gmail or protonmail or any other mail provider if there’s a bug in your email client. It’s awful how much people have come to assume that clients and servers must and always come from the same provider.
Honestly, any platforms hosting user-generated content who use the legal argument that they only provide hosting and aren’t responsible for what their user post shouldn’t also be able to sell the same data and claim owning any of it.
Otherwise, take away their legal immunity. Nazis or pedophiles post something awful? You get in front of the judge.
kbin.life
Active