[Task] Select the first trusted Postbox encryption and hand-over policy profile #25

New Issue

zemion · 2026-07-28T23:01:06+02:00

zemion commented

2026-07-28 23:01:06 +02:00

Decisions required

Before Postbox claims end-to-end encryption or distributes historical key epochs, select and document:

history available to a new incumbent;
recovery/escrow authority and quorum;
ordinary key rewrap versus full ciphertext re-encryption triggers;
assurance/quorum for delegation, hand-over, emergency access, export, and destruction;
vacancy escalation without granting unrelated plaintext access;
external-recipient proof and token profile.

Constraint

The plaintext first slice may reserve compatible metadata and interfaces, but must not imply that expiry or revocation removes plaintext already fetched or exported.

## Decisions required Before Postbox claims end-to-end encryption or distributes historical key epochs, select and document: - history available to a new incumbent; - recovery/escrow authority and quorum; - ordinary key rewrap versus full ciphertext re-encryption triggers; - assurance/quorum for delegation, hand-over, emergency access, export, and destruction; - vacancy escalation without granting unrelated plaintext access; - external-recipient proof and token profile. ## Constraint The plaintext first slice may reserve compatible metadata and interfaces, but must not imply that expiry or revocation removes plaintext already fetched or exported.

zemion added the

labels 2026-07-28 23:01:06 +02:00