2017-07-17 UTC
# saranix it's not a matter of who owns it, but what it's authorized to be used for. I have 3 uses defined explicitly -> signLocations (e.g. which servers are allowed to speak for this id), 'signTransportRekey' (e.g. allowed to change the transport key (the one attached directly to the actor) without having an https:// endpoint that matches, and E2E (encrypt payloads to be read only by receiver)