Re:Around 293 intermediate CAs in violation of CA/Browser gu...
by jakear on Monday July 06, 2020 @11:17AM
(#23748818)
Further, if I can destroy all keys do I even need to revoke the cert? (Honest question, I’m actually not sure)
[ Parent
| on HN ]
Re:Around 293 intermediate CAs in violation of CA/Browser gu...
by floatingatoll on Monday July 06, 2020 @11:38AM
(#23749039)
Revocation is required by policy, so the question is technically moot. It’s generally good practice to generate and publish a revocation prior to destroying a private key, though.
To provide an analogy in the context of PGP keys, if an attacker somehow finds a backup of your revoked and destroyed private key someday, they will have trouble using it because your revocation will be public and on record.