Hayden B
Hayden B
cc @asraa @priyawadhwa @znewman01 for more discussion
An alternative to making breaking changes, while still increasing the batch size, would be to keep the current design and increase the MMD to O(minutes). Rekor already polls Trillian until...
seemed to be one-off
Still frequently occurring.
It looks like the cause is that production is running 0.10.0 and not 0.11.0 which contains the fix. I'm updating prod now, though we can't rollout the latest 0.12.0 yet...
@asraa, can you verify this is now working and mark as closed once you do?
What's the purpose of recording old tree heads? If you want a witness, then you should run rekor-monitor/omniwitness.
@asraa FYI
This came up in https://github.com/sigstore/cosign/issues/2194, when discussing how to handle expired certificates. Either a Rekor entry or a signed timestamp should suffice as a countersignature over time. A TSA doesn't...
Tracking issue - https://github.com/sigstore/root-signing/issues/466