Re:NSA, FBI, and CISA Release Cybersecurity Information Shee...
by thinkmassive on Tuesday September 26, 2023 @09:31AM
(#37659027)
Signing keys can be derived from a root key that allows for rotation and revocation. Multiple keys can sign the same content.
Re:NSA, FBI, and CISA Release Cybersecurity Information Shee...
by rtkwe on Wednesday September 27, 2023 @01:25PM
(#37677993)
Now you have to securely deliver those keys to the cameras and people have to keep them up to date. With smartphones it's a bit easier because that can just be pushed to the phone automatically but for news orgs and other professional outfits their camera's aren't internet connected. So then you have a weird mishmash of deciding if an out of date key is being used because it's been cracked/stolen or if the NBC stringer just didn't update their camera before heading to the event.
The biggest risk IMO is that key becomes immediately one of the most important secrets to keep since it holds the promise of validating anything you want to lie about.