Skip to content

Commit 13b7c56

Browse files
committed
Add disclaimer
1 parent 69d18ae commit 13b7c56

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

ENCRYPTION.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
# A note about age encryption in HashUp
22

3+
> [!WARNING]
4+
> Disclaimer: the author isn't a cryptographer, so take all this with a grain
5+
> of salt.
6+
37
The age encryption used when encrypting NATS messages isn't a suitable encryption method, as it lacks some desired properties for message exchange:
48

59
> Indeed, we don't want people to use age for messaging, because it would be a pretty lousy messaging encryption tool: no forward secrecy, no ratcheting, no authentication... age is optimized for file encryption, so the occasional reminder of that is something we want to keep, although I agree PAYLOAD would be a good generic word.

0 commit comments

Comments
 (0)