Should an LLM’s watermark detector be made public? A dual-key method shows that the risk remains contained
Suppliers keep their watermark detectors secret for fear of them being circumvented. A study proposes publishing half of them: forgery then becomes possible, but remains detectable using the private key.