6 ms·
> Who says HP didn't use the web page for revoking certificates? There's no web page for revoking Developer ID certificates. Only Apple can revoke them. I know
by _qulr 6y ago
> Who says HP didn't use the web page for revoking certificates?
There's no web page for revoking Developer ID certificates. Only Apple can revoke them. I know because I have a Developer ID certificate myself, and also because Apple says so in section 4.8 of their document: https://images.apple.com/certificateauthority/pdf/Apple_Developer_ID_CPS_v3.0.pdf https://images.apple.com/certificateauthority/pdf/Apple_Deve...
> Who says HP didn't tell Apple the key was compromised?
Their key wasn't compromised, so why would they say this?
> Why wouldn't Apple assume the private key was compromised if that's the only reason a developer would request revocation?
Why would Apple assume anything? Apple can reply to the email, or call HP on the phone. (Apple has the phone # of all registered developers.)
- pseudalopex 6y agoThe document doesn't say there isn't a web page. There at least used to be one.[1] The request had to be intentional if they had to email Apple. Whatever reason they thought they had turned out to be incorrect. [1] https://www.quora.com/How-do-I-revoke-my-Apple-Developer-certificate https://www.quora.com/How-do-I-revoke-my-Apple-Developer-cer...
- _qulr 6y agoThe document says you have to email Apple Product Security. I also say there isn't a web page, as the owner of a Developer ID cert. That link is for an iOS Development certificate, which is under the WWDR CA, not the Developer ID CA. Compare section 4.8 of this document, which says there is a website for revoking WWDR issued certs: https://images.apple.com/certificateauthority/pdf/Apple_WWDR_CPS_v1.21.pdf https://images.apple.com/certificateauthority/pdf/Apple_WWDR...
- pseudalopex 6y agoThe first document says you may email Apple Product Security. The second document does suggest you're correct.