What happens if user forgets his password ?

[theodorDiaconu]

No description provided.

[PhilippSpo]

Since all of his data is encrypted with his private key, and his private key is encrypted with his password, his data will be lost if his private key is lost...

[theodorDiaconu]

@PhilippSpo so I figured. The thing is I am trying to build a system where this is recoverable by a set of security questions. We'll decrypt his private key with the md5-or-whatever hash from the answers of his questions. This way we can assure data recover-ability.

It might be neat if you could implement that, meanwhile I'm building my own zero-knowledge system using your node-rsa meteor+browser ready library. Good job so far with this package, but it definitely needs fallback + a super user that can access his data.

Business use case:
Host cannot read the data.
An logged in admin can read the encrypted data of other users.