@nikitonsky can. But with a public key you can't login. For login you sign random data from the server with a private key and send a signature to the server.
So public key leakage has no security issues for you.
Top-level
@nikitonsky can. But with a public key you can't login. For login you sign random data from the server with a private key and send a signature to the server. So public key leakage has no security issues for you. 2 comments
@nikitonsky email is a user’s global ID, not a secret. The public key is unique for each website and can't be used to identificate users. A public key is better than a password hash because of the better crypto methods behind (it is hard to do hash right). |
@sitnik_ru same with email