4 ms·
Further, if I can destroy all keys do I even need to revoke the cert? (Honest question, I’m actually not sure)
by jakear 6y ago
Further, if I can destroy all keys do I even need to revoke the cert? (Honest question, I’m actually not sure)
- floatingatoll 6y agoRevocation is required by policy, so the question is technically moot. It’s generally good practice to generate and publish a revocation prior to destroying a private key, though. To provide an analogy in the context of PGP keys, if an attacker somehow finds a backup of your revoked and destroyed private key someday, they will have trouble using it because your revocation will be public and on record.