And thus even if the main key leaks, the backup keys are not known.

Reply to this note

Please Login to reply.

Discussion

And if you need to access the backups just giftwrap them with yet another key so that they backup key never leaves the backup client.

Ok, thanks.

So, is it correct that the sender has forward secrecy, the receiver does not?

I think so. Maybe the better way is that we haven't been able to figure out a way to do it yet.