We would like to rotate our Identity Verification key once a year. However, currently that means we’ll have to fully turn off identity verification during the rotation process. That’s not too easy at our company since it takes a couple days for changes to go out, so we’ll need to turn off identity verification while this is happening.
If we could have 2 Identity Verification keys, we could make a new one, rotate to use the new one, and then once the key is being used everywhere, we could delete the old one (like we can for most other security keys)
As it is we either have to not rotate, or do this thing where we turn off Identity Verification until we can make the change neither of which feel like great options to me.
