A digital message can be sent from a sender to a recipient in a public-key based cryptosystem comprising an authorizer. The authorizer can be a single entity or comprise a hierarchical or distributed entity. The recipient can decrypt a message from the sender only if the recipient possesses up-to-date authority from the authorizer. Key status queries and key escrow are unnecessary in some embodiments. Other features are also provided.