This repository has been archived by the owner on Dec 12, 2024. It is now read-only.
SIP for key rotation #601
Comments
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Production deployments are expected to use a KEK for encrypting private keys under the service's custody, and a DEK for app level encryption of all data written to storage. Both of these encryption keys should support key rotation. The first step is to come up with a proposal for handling key rotation, in the form of a SIP
The text was updated successfully, but these errors were encountered: