diff --git a/draft-ietf-lamps-x509-shbs.md b/draft-ietf-lamps-x509-shbs.md index d4fb657..a61fea1 100644 --- a/draft-ietf-lamps-x509-shbs.md +++ b/draft-ietf-lamps-x509-shbs.md @@ -509,8 +509,7 @@ Various strategies for a correct state management can be applied: prevent OTS key reuse before a new signature is released. If OTS key reuse is detected, freeze all new signature generation by the private key, re-audit previously released signatures (possibly revoking the private key - if previously released signatures showed OTS key reuse), and spend a lot - of money trying to figure out you ended up with a OTS key reuse. + if previously released signatures showed OTS key reuse). - Use a stateful HBS instance only for a moderate number of signatures such that it is always practical to keep a consistent record and be able to