3 ms·

The poster you originally replied to is suggesting this for revoking the attackers keys. Not for revocation of their own keys…

• securesaml 9mo ago
  there's still some risk of publishing an attacker's key. For example, what if the attacker's key had access to sensitive user data?
  • avarun 9mo ago
    [flagged]
  • throwawaysleep 9mo ago
    All the more reason to nuke the key ASAP, no?
• deleted 9mo ago
  [deleted]