Today the 47th Key Signing Ceremony for the DNS Root Zone Was Conducted

> This ceremony is likely the last with special COVID-19 mitigations in place. If circumstances permit, in 2023 we are planning for normal ceremony operations.

This makes me wonder if the whole process wouldn't be "safer" if it were carried out as a multi-party distributed cryptographic process, with the participants in multiple jurisdictions.

I don't want to suggest that a blockchain necessarily has to be used, since there are only a small fixed number of non-anonymous participants, but it should be possible to generate a random number and publish some signatures without everyone having to be in the same room.

Is the danger that one of the participants is using malicious HSM hardware that allows them to extract the private key, and this flaw in the hardware could be detected by the people standing in the room watching?

I suppose the HSM is only one layer of the physical security, and they actually need someone there with physical keys and an ability to check that various seals haven't been tampered with, but that again just makes me think that the key itself should be split across different jurisdictions.