BetterSign™
Compromised or lost a key? Rotate it — or use a stronger backup key to recover — without becoming a stranger to everyone you know.
Advertised keys live under /pubkey in the log's virtual key-value store. Rotate by appending an entry; recover via a Lamport threshold group set in the highest-precedence lock script.
A stable name on the outside, freely changeable keys on the inside.
The picture
Even the best key doesn't stay perfect forever. Rotating to a fresh key on a regular basis means that even if an old one leaks, it's already retired and worthless. Rotation stops being an emergency and becomes healthy routine.
Each rotation appends an entry that updates /pubkey; the prior key is revoked by that update (or an explicit delete op). The blast radius of a leaked key is bounded to the window before the next rotation.
What it fixes
How it works
You create a fresh key on your own device
You add it as a new signed page in your logbook
The old key is marked retired, so it can no longer be used
Followers verify the change themselves and switch over automatically
Your VLAD — your identity — never changes through any of it
The building blocks
A VLAD remains stable while its keys and protected metadata rotate.
Every state transition is hash-linked and authorized by the previous log state.
VLADemlia helps peers locate current records without becoming the trust root.
Key changes become signed updates that followers can verify and apply.
The jargon, translated
Questions
No. Point your tools at a VLAD and BetterSign keeps the keys current for you — SSH that doesn't break when keys rotate, TLS that renews itself, API tokens you can rotate freely.
Recovery is built in. A stronger, better-protected backup key can fix things if a normal key is lost or stolen — no out-of-band scramble.
The longer a single key stays in use, the more chances a copy ends up somewhere it shouldn't. Rotating retires old risk — like changing the locks now and then.
No. A VLAD is owned by you and no one else, proven by math anyone can check, and still verifiable years later — even offline.
Point your tools at a VLAD and BetterSign keeps the keys current for you.