3 ms·

I don't know who thought that having the possibility of revoking certificates was a good idea, especially when that possibility is controlled by CAs

• andrewflnr 11y ago
  People who considered the possibility of private keys for certs getting compromised.
  • schoen 11y ago
    It's an interesting question whether it would be a good idea to require revocations to be signed by the subject key rather than by the issuer key. I guess it depends on the threat model! Conceptually, the idea is that if the issuer makes an assertion about what's true, they want to later be able to stop making that assertion. That seems to make basic sense. (But in some threat models, the issuer might have been coerced, and maybe it's easier to coerce authorities to revoke than to misissue. For one thing, browsers are unlikely to kick CAs out of their trust lists for improper revocation, but they might for misissuance!)