re: #360 McSpiff

Well, yes and no. We use them to transfer documents onto systems that are air gapped from the world. But…there’s like 2 of them in the office. Separate machines, big procedure, involves biometric thumb drives. Not exactly something you can subtly do.

It’s also worth repeating: encrypt every file with a unique key, distribute hashes (not the actual keys) designed to work for a limited period of time, as needed. Change the hashes on the server end on a regular basis, say every 24 hours. This is how you secure large quantities of secret data which need to be accessible. That way, if someone tries to gain access to something they shouldn’t, not only will they get nothing more than encrypted garbage (if they get anything at all), but you can then track whose key was used.