sp key rollover

[Kevin Foote]

> On Apr 17, 2015, at 1:46 PM, Brent Putman <putmanb at georgetown.edu> wrote:
> 
> On 4/17/15 4:32 PM, Cantor, Scott wrote:
>> What is the key being used for? There is no way for you to unilaterally roll an encryption key. They have to have the ability to load both keys and decrypt with either.
>> 
>> That doesn't work for encryption. They MUST also load both or you're done here.
> 
> My boss asked me about this yesterday.  I don't see the original message from Canvas, but from what I understood they don't support multiple decryption keys on their side.  It sounded like they were advising there would be a flag day, and everyone would have to change their locally-defined encryption key in lock step with Canvas.  Which if true, is obviously insane and broken.  Again, this might not be the case, but that's what I was lead to believe - the email from them apparently says something to the effect of "you must update your Canvas encryption key on date X, or things will break”.

I read their note as they would not be doing anything until 21st on the production side. That was my take anyway.

--------
thanks
 kevin.foote