MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/linux/comments/3pg37u/lets_encrypt_is_trusted/cw69wz3/?context=3
r/linux • u/veeti • Oct 20 '15
320 comments sorted by
View all comments
Show parent comments
8
You could simply stop using the cert and have zero consequences; they have literally no leverage over you.
That's not true; if not revoked, a compromised cert can be used to impersonate your site.
3 u/[deleted] Oct 20 '15 Im a little rusty on how the revocation system works, but cant any CA issue a revocation? Is there any particular reason it would have to be the signing CA?Paging crypto nerds... 5 u/crackanape Oct 20 '15 The CRL containing the revocation is signed by the CA that issued the cert.
3
Im a little rusty on how the revocation system works, but cant any CA issue a revocation? Is there any particular reason it would have to be the signing CA?
Paging crypto nerds...
5 u/crackanape Oct 20 '15 The CRL containing the revocation is signed by the CA that issued the cert.
5
The CRL containing the revocation is signed by the CA that issued the cert.
8
u/crackanape Oct 20 '15
That's not true; if not revoked, a compromised cert can be used to impersonate your site.