Rotate the key while nothing is wrong
Reconstructs trust-anchor rotation from the systems that do it on schedule (the DNS root, Entra ID, Sigstore, OpenSSH, Let's Encrypt) and the incidents where it was absent or late: Storm-0558's seven-year-old …
What surprised meMicrosoft stopped rotating MSA signing keys in 2021 because a manual rotation had caused a major outage; the fix for an availability incident left th…