Tag
key-rotation
- Mar 24, 2026 Discovery Metadata and the Key Set Rotation Problem How a well-known document bootstraps trust in endpoints and signing keys, and what an implementation must do when the published key set changes underneath it. internet protocols
- Jun 7, 2025 Key Rotation, Key Versions, and Why Re-Encryption Is Optional How versioned keys and wrapped data keys let a system rotate without rewriting ciphertext, and when that shortcut stops being safe. cryptography
- Jul 18, 2024 Key Commitment and Why an AEAD Can Decrypt Under Two Keys AEAD schemes are not committing by default, so a ciphertext forged to verify under two different keys splits the receiver into two views of the same message, with consequences for key rotation and message franking. cryptography
- Jun 19, 2024 Opaque Session Identifiers Versus Signed Tokens How server-side session lookup and self-contained signed tokens differ in revocation, verification cost, and failure behaviour when a key or a datastore goes away. security
- Oct 18, 2023 Signing Key Rotation and the Proof-of-Rotation Lineage How a new signing key proves continuity with the old one, why the lineage is a linked list of cross-signed certificates, and what a device that has never seen the old key must be told. mobile computing
- Feb 8, 2023 Signed Cookie Tokens and the Limits of Statelessness How a signed token encodes session facts, what the signature actually guarantees, and which operations stop being possible once the server keeps no record. backend systems