3 ms·
I've recently become really interested in things around the periphery of secure systems keys etc. For example in this scenario, what happens if one of key-hold
by amirmc 11y ago
I've recently become really interested in things around the periphery of secure systems keys etc.
For example in this scenario, what happens if one of key-holders dies? Presumably the remaining are enough for a quorum, but say something bad happens at a conference that many of them are at? It makes me think of why the President and Vice-president aren't in the same place at the same time.
In this case, I expect it would be possible to start again and select a new group of keyholders but what downstream effects would that have? In any case, I'm looking forward to seeing this progress.
(Incidentally, one of the contributors is also an author of the OCaml TLS stack.)
- hannesm 11y agoThe quorum definitively helps. If too few keys/people are remaining, there are two options: download and install an updated opam (with a new set of keys) out of band OR using another opam-repository (with e.g. trust-on-first-use) for an update of opam itself (which then ships new keys for the main opam repository).