You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
At the end of chapter 6.1.4, one can currently find a warning:
The following questions are still open:
Should actors always be able to revoke the ID-Cert they are sending the revocation message with without needing to complete a sensitive action?
Currently, I cannot see any reason that would speak against this.
How can actors remain in control of their keys? If revocations need to be signed by the server, then the server has more authority over keys than the actor does
Revocations should likely never have to be signed by the server. Either that, or it does, but the trust model assumptions apply.
These questions should be answered, with the warning being removed in the process.
The text was updated successfully, but these errors were encountered:
At the end of chapter 6.1.4, one can currently find a warning:
These questions should be answered, with the warning being removed in the process.
The text was updated successfully, but these errors were encountered: