A method, comprising: receiving, over a network from an owner device associated to an owner of a data channel, a first encrypted channel key for the data channel, the first encrypted channel key being a channel key that is encrypted with a public key associated to the owner of the data channel, the channel key being used to encrypt content shared through the data channel; receiving, over the network from the owner device, one or more secondary encrypted channel keys, each secondary encrypted channel key respectively being the channel key that is encrypted with a public key associated to a respective participant of the data channel; storing the first encrypted channel key and the one or more secondary encrypted channel keys to a channel list; distributing, over the network, the channel list to one or more participant devices that are respectively associated to each participant of the data channel; wherein communications over the data channel include all of the encrypted channel keys in the channel list, and content encrypted using the channel key; characterized by receiving, over a network from the owner device a first encrypted second channel key for the data channel, the first encrypted second channel key being a second channel key that is encrypted with the public key associated to the owner of the data channel, the second channel key being used to encrypt content shared through the data channel, to the exclusion of at least one of the participants; receiving, over the network from the owner device, one or more secondary encrypted second channel keys, each secondary encrypted second channel key respectively being the second channel key encrypted with the public key of one of the participants, wherein the one or more secondary encrypted second channel keys do not include a secondary encrypted second channel key that is the second channel key encrypted with the public key of the at least one of the participants that are excluded; updating the channel list to include the first encrypted second channel key and the one or more secondary encrypted second channel keys; distributing, over the network, the updated channel list to the participant devices, wherein additional communications over the data channel include all of the encrypted channel keys in the updated channel list, and content encrypted using the second channel key. receiving, over a network from an owner device associated to an owner of a data channel, a first encrypted channel key for the data channel, the first encrypted channel key being a channel key that is encrypted with a public key associated to the owner of the data channel, the channel key being used to encrypt content shared through the data channel; receiving, over the network from the owner device, one or more secondary encrypted channel keys, each secondary encrypted channel key respectively being the channel key that is encrypted with a public key associated to a respective participant of the data channel; storing the first encrypted channel key and the one or more secondary encrypted channel keys to a channel list; distributing, over the network, the channel list to one or more participant devices that are respectively associated to each participant of the data channel; wherein communications over the data channel include all of the encrypted channel keys in the channel list, and content encrypted using the channel key; characterized by receiving, over a network from the owner device a first encrypted second channel key for the data channel, the first encrypted second channel key being a second channel key that is encrypted with the public key associated to the owner of the data channel, the second channel key being used to encrypt content shared through the data channel, to the exclusion of at least one of the participants; receiving, over the network from the owner device, one or more secondary encrypted second channel keys, each secondary encrypted second channel key respectively being the second channel key encrypted with the public key of one of the participants, wherein the one or more secondary encrypted second channel keys do not include a secondary encrypted second channel key that is the second channel key encrypted with the public key of the at least one of the participants that are excluded; updating the channel list to include the first encrypted second channel key and the one or more secondary encrypted second channel keys; distributing, over the network, the updated channel list to the participant devices, wherein additional communications over the data channel include all of the encrypted channel keys in the updated channel list, and content encrypted using the second channel key.