News for hackers. Stuff that matters.

A comment on Let's Encrypt AUTHZ Reuse and Eternal Account Key. Parent comment

Re:Let's Encrypt AUTHZ Reuse and Eternal Account Key by lftl on Tuesday October 25, 2016 @12:04PM (#12789045)
> Even key revocation does not require the account key, just the certificate private key. So really, what is the point? Unless there's something you actually need the account_key for... I feel like this was a failure to KISS.

Can you revoke with either one? If someone steals my account key, and creates a new certificate private key do I have no way of revoking that since I don't have the new certificate private key?

[ Parent | on HN ]
Re:Let's Encrypt AUTHZ Reuse and Eternal Account Key by pfg on Tuesday October 25, 2016 @12:09PM (#12789076)
Yes, both keys can be used to revoke, so as long as you still have either the account key or all certificate private keys, you're good.
[ Parent | on HN ]