On Mon, Mar 02, 2020 at 07:48:23PM +0000, Corey Bonnell wrote: > I do think there's value in developing some standard mechanism to request > revocation/demonstrate possession of the private key.
Interestingly, there (more-or-less) is one these days, as part of ACME. It requires the usual amount of faffing around that's required to do anything non-trivial with a JWS, but it does get the job done. - Matt _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
