Closed atoulme closed 2 years ago
@atoulme ... how about this? cc @chaals @humbitious
[R82] A BPI Subject Account MUST be encrypted to and decrypted by a cryptographic key only known to the BPI Subject Account owner.
Closing. Addressed with merged PR https://github.com/eea-oasis/baseline-standard/pull/173
R82 states:
A BPI Subject Account MUST be encrypted to and decrypted by one or more cryptographic keys only known to the BPI Subject Account holder.
Does this mean that the account can be encrypted by multiple keys at once? Or does it mean that it can be encrypted by one of the keys available, using a criteria left to the implementer?