[messaging] Key rotation

David Leon Gil coruus at gmail.com
Mon Jan 5 22:06:34 PST 2015


On Sun, Jan 4, 2015 at 5:12 AM, carlo von lynX
<lynX at i.know.you.are.psyced.org> wrote:
> I don't see how the PGP concept of "key rotation" is relevant if all
> communications work over forward secure ratchets anyhow. Why would I
> need to rotate the device-identifying subkey. Am I missing something here?

Yes.

I'm interested in systems in which it is safely possible to message
not only people with whom you frequently correspond, but also people
with whom you have never before corresponded.

This is not true of Axolotl with many-year-old identity keys; the
probability of those keys having been compromised during that time is
very high.


More information about the Messaging mailing list