Replying to Avatar Tim Bouma

I think key rotation (recovery, history) is a higher level service that requires a social component, not just cryptography. My current thinking is baking key rotation into the did:method is a mistake. I think it can be addressed with a trusted nip05 service.
Avatar
Melvin Carvalho 1y ago

did:method definitely a mistake

Reply to this note

Please Login to reply.

Discussion

Avatar
Tim Bouma 1y ago

All the stuff I’ve seen on key rotation using cryptography means protecting even harder the root key. If that key gets leaked, you’re really screwed over.

Avatar
Melvin Carvalho 1y ago

Very good point. But there must be a better way. I dont think we'll find it until we try things, though. Like an evolution rather than a one shot answer.