4 ms·
> so unless HP emailed Apple and said their private key is compromised, there's no good reason for Apple to revoke the cert. Why? If a business asked for their
by yladiz 6y ago
> so unless HP emailed Apple and said their private key is compromised, there's no good reason for Apple to revoke the cert.
Why? If a business asked for their code signing certificate to be revoked, why shouldn’t they be able to?
- _qulr 6y agoBecause revoking a Developer ID cert immediately (on the next OCSP check) disables all software ever signed with that cert on every Mac in the world. It's a remote kill switch. I can't emphasize enough what an extreme, last resort measure revocation is for Developer ID code signing certs.