Yes exactly. I asked about this and got a very duhdoy frost just HAS key rotation type of response so I had to dig a bit myself.

FROST is not exempt from requiring some central coordinator to facilitate a rotation. I suspect that in the use case we are talking about, i.e. an nsec bunker type setup, when one key is compromised, the user destroys the others and regenerates a new set of keys.

This doesn't stop someone who managed to discover two of your keys. This type of key rotation does not affect them at all.

Someone correct me if I'm wrong.

Reply to this note

Please Login to reply.

Discussion

No replies yet.