We had a few creative workarounds for this:
- email keys rotate every 6mo, so you could have the og wallet just approve rotations (or other guardians)
- we also had time locks on the rotation updates to prevent malicious oracles from stealing funds for N days
- jwt keys rotate weekly, so that's annoying
- DNSSEC is on for proton mail which is nice, no oracle
Show more
