We generate a random key, and encrypt the paste with it using - the sjcl javascript library.
+ the sjcl + javascript library.The content is sent encrypted to the server, which returns the - address of the paste.
-The javascript code take the address, and add the encryption - key in the URL hash (#).
-When somebody reads the paste, he goes to the URL. If - the hash with the key is in it, the javascript will use it - to decrypt the content sent by the server.
+ address of the newly created paste. +The javascript code then redirects to this address, but it adds the + encryption key in the URL hash (#).
+When somebody want to read the paste, he usually just click on a link + with this URL. If the hash containing the key is part of it, Obin's + javascript will use it to decrypt the content sent by the server.
The browser never sends the hash to the server, so it does not receives the key.