News for hackers. Stuff that matters.

A comment on Why One Key Shouldn't Rule Them All: Threshold Signatures for the Rest of Us. Parent comment

Re:Why One Key Shouldn't Rule Them All: Threshold Signatures... by tjoff on Saturday March 21, 2026 @05:36AM (#47465538)
You can't get the private key but you can sign with it, which is still plenty bad.
[ Parent | on HN ]
Re:Why One Key Shouldn't Rule Them All: Threshold Signatures... by bob1029 on Saturday March 21, 2026 @05:46AM (#47465603)
The private key should be tightly scoped to its context of use. I would definitely agree with you if it's one key that rules the entire kingdom.
[ Parent | on HN ]
Re:Why One Key Shouldn't Rule Them All: Threshold Signatures... by tjoff on Saturday March 21, 2026 @06:48AM (#47465884)
Not sure I follow? Lets say it is limited to one use only, sign an app.

Since I've got control of the box I can now use it to sign any app. Isn't that bad enough?

[ Parent | on HN ]