acmeattic-devel team mailing list archive

[Aditya Manthramurthy <aditya.mmy@xxxxxxxxx>]

On Sunday 11 July 2010 08:42 AM, Karthik Swaminathan Nagaraj wrote:
> I created our first blueprint! :)
> Take a look at it and the specification details on the Wiki.

Thanks for writing it. We can restrict the encryption features for the 
first alpha release to include only server authentication (TLS), client 
authentication, and data encryption. Data encryption will involve secure 
per-file AES key creation and encryption.

The AES key creation for a user from the password is a feature intended 
for the client challenge authentication (like in spideroak). I think we 
can keep this for a future alpha release. I have made changes to this 
effect on the blueprint.


--
Aditya.