Hacker News Reader

I generally just use GPG.

1. I share my public key (if not done previously).

2. They encrypt the secret and send the result back, all using whichever tools they'd like.

3. Only I (and any additional recipients specified during encryption) can view the secret data.

That's definitely a good way to do it, and if it works for you then awesome! We're kind of doing something similar here with this in a workflow where you don't have to share the key and it requires not technical knowledge of doing this. I actually did this with my dad over mobile phones and he doesn't know how to use public-private key encryption.

I'd argue that using GPG as the sharer of a secret has nearly the same level of complexity when using something like pgptool.org, assuming there is no need to _sign_ the data as well.

Reply on news.ycombinator.com