[GemStone-Smalltalk] Understanding secure backups

[Iwan Vosloo]

Hi Norm,

 >> On 08-09-2019, at 7:45 PM, Norm Green via GemStone-Smalltalk
 >>
 >> Yes I can add a request.  Could you please explain the practical use
 >> of such a feature?


I am just wondering how to handle the situation of a compromised key and 
similar situations where you want protect existing backups from access 
via a key that is no longer trusted.


On 2019/09/09 13:11, Jerry Kott via GemStone-Smalltalk wrote:
> If I may have some input on this conversation, I would suggest that 
> rotating certs adds complexity, and complexity is the enemy of security. 
> Without knowing all the details of specific security requirements, I 
> think properly managing and securing a single certificate chain would be 
> a better solution.

I'd love to hear an elaboration.

Regards
Iwan