Concepts

ritueel is a teaching product, so the ideas come first. Read these pages in order; each one assumes the page before it.

Page	What you learn
Roots, intermediates and transitions	What a root is, why you want more than one, how a new root takes over from an old one, and what outsiders have to install.
Where a key lives	Software, a YubiKey, or AWS KMS: what each protects against, what it costs, and how to choose.
Two roots in practice	What public CAs do, how clients behave when an intermediate has two certificates, and how the two cards alternate by year.
OpenPGP release keys and the keyring	The primaries, the board subkey, the back-signature, the keyring package, and what gpg, sqv, apt and rpm were tested to accept.
The ceremony	What a person does at a ceremony, what the tool checks before each touch, and the open question of the card tool.

Design phase

ritueel has no release yet. These pages describe the model that the tools will follow (ADR 0001). Where a page says what a tool does, the tool is planned unless the page says it is built; the roadmap has the order.