I find it interesting how this all comes down to what do you trust. Like.. why n... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

nazcan 6 months ago | parent | context | favorite | on: You don't want long-lived keys

I find it interesting how this all comes down to what do you trust. Like.. why not <1 minute keys? Or 1-request?

MartinodF 6 months ago | [–]

We do a lot of request signing (think AWS sigv4a) which practically speaking amounts to 1-request.

ignoramous 6 months ago | [–]

> why not ... 1-request

You kid, but: https://en.wikipedia.org/wiki/Hash-based_cryptography

also: https://www.imperialviolet.org/2013/07/18/hashsig.html (2013).

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact