Following the discussion in issue #710, I added a “Security considerations” section to FEP-521a:
https://codeberg.org/fediverse/fep/pulls/731
It describes the best practices for handling secret keys.
fep_521a
Controlled Identifiers is a W3C Recommendation now: Controlled Identifiers v1.0.
I've updated FEP-521a: Representing actor's public keys, and started the finalization process.
RE: https://w3c.social/users/w3cdevs/statuses/114512015052995827