Giving Upspin a spin

Posted Mar 9, 2017 21:43 UTC (Thu) by pspinler (subscriber, #2922)
Parent article: Giving Upspin a spin

A couple of comments, all impacting on project lifespan:

* Google has a history of deciding to end of life projects. If they were to do so with upspin, what would happen to the global keyserver?

* Is there thought given to replacing the SHA-256 hash in the future? See the current debates about replacing SHA1 in git, for instance. How about the key algorithm, similarly?

* Also, with regard to replacing a person's key, what if a key should get compromised? For instance, if someone is compelled to give it up crossing a border?

-- Pat