<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">On 2 Apr 2019, at 11:56, Matthew Pounsett <<a href="mailto:matt@conundrum.com" class="">matt@conundrum.com</a>> wrote:<br class=""><div><div class=""><br class="Apple-interchange-newline"></div><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">4. An emergency key-roll due to key compromise (of any number of flavours) will be expected, easy to execute and easy to understand from the client side. Contributing oil on the wheels might be long-timebase pre-publication of standby keys and the processes for an emergency roll closely resembling (or being identical to) processes for a scheduled roll.<br class=""></blockquote><div class=""><br class=""></div><div class="">Pre-publishing keys for the purposes of emergency roll in the event of compromise sounds hard, and definitely expensive,</div></div></div></div></blockquote><div><br class=""></div><div>I'm not sure I agree that words like "hard" and "expensive" are useful before any design exercise has happened. You're presupposing a particular class of solutions, I think.</div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_quote"><div class=""> given how they key material is handled today. I think a third signing party location would be required, with each key stored in only two locations. This is probably achievable, but I suspect it'll take a while for people to agree on costs and location, and then more time to get it set up.</div><div class=""><br class=""></div><div class="">We will likely want to come up with an interim plan for emergency rolls until something like the above can be arranged.</div></div></div></div></blockquote><div><br class=""></div></div>We have an interim plan right now; it's documented in the DPS. It has never been tested. It may well not be complete.<div class=""><br class=""></div><div class=""><br class=""></div><div class="">Joe</div></body></html>