← Back to context

Comment by smalltorch

3 hours ago

I thought the exact same thing and that's what I would do too(I didn't). This is from the official openpgp repository and you end up asking your self these things.

PGP is set up in a way where this wouldn't be that hard either. You could easily encrypt every message with a master key so that every PGP message sent would be decryptable. That's how group messaging works, everyone encrypts the same message with everyone's key. Otherwise you would not be able to read your own outbound main for instance.

The hardest thing you would have to do is hide the fact that your key exists inside the source code, as well as the instruction set to encrypt it with this key.