D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Re Malware being distributed using list emails

 


On 16/03/2022 08:18, maceion@xxxxxxxxx wrote:

How do you transfer files securely?

The way I do it, which is probably pretty lame, is to use two channels, both with some sort of authentication and hope of privacy. In one channel I describe the method, hopefully encrypted, of how they can access the information. Then I use the second channel where I provide the key or password, without any context as to what it is for, which completes their access requirements.

I do not profess this to be entirely secure, often I use email as one channel and SMS as the key provision. This is obviously not good if you have a single device that has access to both these channels (e.g. a smartphone).

We rely on trust so much in our everyday lives nowadays, trust in software, and also trust in hardware, which means unfortunately, truly the most secure method of exchanging information is still an envelope with a wax seal, and hopefully a good Diffe-Hellman exchange.


--
The Mailing List for the Devon & Cornwall LUG
https://mailman.dcglug.org.uk/listinfo/list
FAQ: https://www.dcglug.org.uk/faq/