That works too, but who controls the servers, and how is the authority handled? Backing up the data is one thing, and that can be easily done I believe. But what about for future advisories? They are published via one of the authoritative servers and synced to the other authoritative servers? How is that information verified to ensure bad actors aren't publishing bullshit information?

I don't think blockchain is necessarily the answer. The whole thing can just be done with signing keys, yeah?

I know everyone hates on blockchain, but I think its kinda neat and would like to see some cool applications with it one day.