Join GitHub today
GitHub is home to over 31 million developers working together to host and review code, manage projects, and build software together.Sign up
Key Rotation? #146
I had assumed, until moments ago, that Cachix was either signing server side, or was keeping a copy of my signing key. I'm realizing now, that's probablt not be the case.
Initially I was curious about loss of the signing key, but really in general, key rotation is probably a desirable feature. Is there was a mitigation for losing the primary signing key at the moment, or not? (Can we delete our cachix repos?)
The first paragraph is part of #71 and this will be fixed very soon.
The key rotation will follow soon after, once multiple signing keys are supported.
Currently you'd have to email me to nuke binary cache, but that will also be added soon after private binary caches are launched in November.