Rotate identity keys, not only prekeys #25

New Issue

2026-09-01T23:27:30Z

paulhitt commented

2026-09-01 23:27:30 +00:00

(Migrated from gitlab.com)

Signed prekeys rotate every 7 days. Identity keys never rotate at all — one compromise is permanent for the life of the device.

The log already records publish and revoke, so a rotation could be expressed as both, and contacts could follow it without a scary key-change prompt if the old key signs the new one.

Trade: a signed hand-off is exactly what an attacker with the old key would forge, so this needs care. Possibly the strongest argument for witness co-signing (#security 1).

⚠️ Idea, not a commitment. Filed 2026-09-01 during the code freeze — design and cost it, do not build it yet.

Signed prekeys rotate every 7 days. **Identity keys never rotate at all** — one compromise is permanent for the life of the device. The log already records `publish` and `revoke`, so a rotation could be expressed as both, and contacts could follow it without a scary key-change prompt if the old key signs the new one. **Trade:** a signed hand-off is exactly what an attacker with the old key would forge, so this needs care. Possibly the strongest argument for witness co-signing (#security 1). --- ⚠️ Idea, not a commitment. Filed 2026-09-01 during the code freeze — design and cost it, do not build it yet.

paulhitt commented

2026-09-04 21:26:45 +00:00

(Migrated from gitlab.com)

Built and merged; deployed 2026-09-04.

paulhitt (Migrated from gitlab.com) closed this issue

2026-09-04 21:26:45 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: extant2000/flamenet-relay#25