4 ms·
If you no longer trust the person, it's easier to tell the janitor not to admit him than to rely on his returning the key (and any copies) or to change the lock
by wsh 12y ago
If you no longer trust the person, it's easier to tell the janitor not to admit him than to rely on his returning the key (and any copies) or to change the lock on the apartment.
- bifel 12y agoIs "changing the locks" (revoking the certificate) really so complicated that this "janitor-solution" is easier/cheaper/safer?
- wsh 12y agoThe CA can revoke the certificate, but since revocation checking in browsers is neither universal nor reliable under attack, revocation isn't a completely effective way to recover from a compromised private key.