search

davidben / merkle-tree-certs

Other
9 stars 2 forks source link

Multiple signing keys? #36

Open bwesterb opened 1 year ago

bwesterb commented 1 year ago

[[TODO: The signing key case is interesting. A CA could actually maintain a single stream of Merkle Trees, but then sign everything with multiple keys to support rotation. The CA -> Subscriber -> RP flow does not depend on the signature, only the CA -> Transparency Service -> RP flow. The document is not currently arranged to capture this, but it probably should be. We probably need to decouple the signing half and the Merkle Tree half slightly.]]