they already solved this with DNS, how about a certificate chain? so (at the very worst) you can revoke the certificate on the stolen car. But also allow lost k

they already solved this with DNS, how about a certificate chain? so (at the very worst) you can revoke the certificate on the stolen car. But also allow lost keys to be replaced by reprogramming them from a dealer certificate (which could also be revoked, and have a TTL). No, I dont want the car to require an internet connection to start, but I think its reasonable to say "to enable anti-theft, your car must resync at least every 6 months to update certificates. If not, it will be easier to steal and you can pay into a higher insurance pool".