Please add support for Blind Key Rotation

Background

Blind Key Rotation is a mitigation for the problem that JSON-LD Linked Data Signatures are irrevocable. It is also useful (albeit less so) in the context of HTTP Signatures, since HTTP Signatures only sign headers and not the object itself, and are also detached from the object.

As Prismo implements support for JSON-LD Linked Data Signatures, it is important that Prismo also implement support for Blind Key Rotation in order to resolve safety problems (future deniability) caused by the irrevocable nature of JSON-LD Linked Data Signatures.

Implementation - receiving objects

Supporting Blind Key Rotation in the validation pipeline is simple enough: if a signature validation fails, refetch the remote actor and recheck the signature accordingly.

Implementation - deleting objects

Supporting Blind Key Rotation to enhance the deniability of deleted objects is also simple enough: send the Delete signed with the original key and then silently replace the keypair. The new keys will be fetched when the user publishes new content.

Questions?

Contact me on fediverse: https://pleroma.site/kaniini