Is there any guarantee each vendor will only ever use one signing key? Or might ...

necovek · on Sept 10, 2020

I would imagine they'd have to use new ones every once in a while.

What I am most worried about is vendor's key becoming compromised (whether cracked or stolen), which means that a revocation mechanism is missing.

Even with revocation implemented, such equipment would be rendered useless (I imagine vendor would have to cover for replacements).

Patrick-STH · on Sept 9, 2020

Discussed later in the video. But this is possible which adds another layer of complexity if one tries to track pulls.