identitykeysblog.grid

blog.grid

tls-cert·7-of-21·ECDSA-secp256r1 (CGGMP24)·key:kms:tls:blog.grid
CUSTODIANS · HEALTHY
21/21
all responsive
DIVERSITY
7 metros
4 providers · 3 jurisdictions
SIGS · 24h
14,392
7d: 98.4k
CAPS ACTIVE
2
across 2 services
NEXT ROTATION
in 12 days
share-set re-share · pubkey stable
LAST USED
47m ago
by edge-pool-us-west
Custodian distribution21 nodes · any 7 can sign
amsfraiadsingrusydhndamsfraiadsingrusydhndamsfraiadsingrusydhnd
healthy 21M-of-N tolerance: any 14 can fail · currently 0 are degraded
Anomaly watch
Signature rate
expected: 600/hr · actual: 612/hr · normal
Bearer drift
All sigs from authorized capabilities
Geo-anomaly
Requests from expected egress regions only
Unauthorized partial sig request
0 in last 7d · custodians correctly refused
Public key & identity
key idkey:kms:tls:blog.grid
algorithmECDSA-secp256r1 (CGGMP24)
public key fingerprint04:8a:f2:…:bc:71
threshold7-of-21
created14mo ago
bound todef:nie / blog.grid
on chainblock 4,218,901 · 14mo ago
Authorization policy

Rules on chain that govern who can do what to this key. Defined when the key was created; changing them is a sensitive op with a 24h veto.

primary issuerdid:grid:pub:mk2…r4
sensitive ops2-of-3 · laptop · phone · yubikey
recovery quorum3-of-5 guardians + 30d veto
veto window24h sensitive · 30d recovery
cap rate cap10k sigs/hr per cap (max)
View primary DID