4 ms·
You can always mitigate the "failure for everyone" scenario. Plethora of government keys, for example, or rotating government keys, or rapidly expiring governme
by sliverstorm 10y ago
You can always mitigate the "failure for everyone" scenario. Plethora of government keys, for example, or rotating government keys, or rapidly expiring government keys... Anyway, they've managed to keep stacks and stacks of information secret for decades and decades. It seems like it could be managed. No one has stolen the cert for *.whitehouse.gov.
Sidenote, why do people call a second key a backdoor? To me, backdoor suggests exploit, not used-as-designed.
- Aelinsaar 10y agoBecause it involves trusting that no one made copies of the key, turning a locked door into a backdoor? Your mitigation ideas are sound though, and could also be used as a kind of rolling canary trap.