Signs a delegation, naming a release key the anchor stands behind.
Keeping the anchor offline and rotating a release key under it is the arrangement to prefer, because the key that signs day to day is the one most likely to be stolen.
The statement to sign.
The anchor identity, which is the root of the trust.
The signed delegation envelope.
Signs a delegation, naming a release key the anchor stands behind.
Keeping the anchor offline and rotating a release key under it is the arrangement to prefer, because the key that signs day to day is the one most likely to be stolen.