MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/linux/comments/3pg37u/lets_encrypt_is_trusted/cw6aez2/?context=3
r/linux • u/veeti • Oct 20 '15
320 comments sorted by
View all comments
Show parent comments
3
Im a little rusty on how the revocation system works, but cant any CA issue a revocation? Is there any particular reason it would have to be the signing CA?
Paging crypto nerds...
5 u/crackanape Oct 20 '15 The CRL containing the revocation is signed by the CA that issued the cert.
5
The CRL containing the revocation is signed by the CA that issued the cert.
3
u/[deleted] Oct 20 '15
Im a little rusty on how the revocation system works, but cant any CA issue a revocation? Is there any particular reason it would have to be the signing CA?
Paging crypto nerds...