Much can be said about this topic; so much in fact, that my main answer to the question what to do when your nsec gets compromised is: cry. Embrace the cry, submit to the cry, deeply grap the cry; for there ultimately only is one brutal reality: cry. Other than that, bunkers, FROST-bunkers, i have some pie in the sky WoT scheme...many possible mitigations. But remember, and this is really important: your instinct to grasp for foolish key-rotation back-up bla bla bla notions, is just cope; cope because you have yet to realize that tears are the only real conclusion. View article →