search

Joystream / joystream

Joystream Monorepo
http://www.joystream.org
GNU General Public License v3.0
1.42k stars 115 forks source link

Policy for Sudo Keys #3798

Closed bedeho closed 1 year ago

bedeho commented 2 years ago

Background

Part of Carthage rollout will involve a Sudo key being active, as described here

https://github.com/Joystream/joystream/issues/3792

This key will be created, stored, used and revoked by Jsgenesis team exclusively.

Proposal

Describe a confidential security policy for

of a multisignature account for usage by Jsgenesis team, obvious objectives are confidentiality, retrievability, rotation, backup. We should seriously consider reviewing using off-the shelf key management services, and also inquire with other Substrate teams about what they have done for Sudo key management.

┆Issue is synchronized with this Asana task by Unito

bwhm commented 2 years ago

of a multisignature account...

For this to work, we need to add the multisignature pallet! Is this trivial @mnaamani ?

bedeho commented 2 years ago

I wasn't even aware there was a separate pallet for this

https://docs.substrate.io/v3/runtime/frame/#multisig

Perhaps you can check what other prominent chains do for their Sudo? do they use this pallet?