Talk:Partial key autonomy

We could avoid much of the pain of testing new firmware releases by putting the per-country keys in the mfg data sector. To start the process, we could issue a signed country-specific firmware release that would automatically install those keys in the mfg data sector. Subsequent firmware releases would be country-neutral, using the country-specific keys, since normal firmware updates preserve the mfg data sector untouched.

This would reduce the maintenance effort to a one-time-per-country event.

We might need to let the country to choose whether the country-specific system will accept both the country key and the global OLPC key, or just the country key. The former seems like a better idea to me, but I can imagine that some country might want the latter. It could be done by adding a tag to mark the country keys as "exclusive" or "alternative".