alt Hacker News> It might even be sensible to intentionally revoke a small number of certificates every month, to make sure nobody is complacent.
No, this is not even remotely sensible.
Replies
solarkraft • today at 3:28 PM
Please elaborate. Conventional thinking goes that emergency plans must be exercised to make sure they’re actually effective.
➕ show 1 reply
sophacles • today at 2:50 PM
It really is. It's basically chaos monkey for pki.
Code paths and procedures that aren't exercised regularly are broken.
Even better is having a way to reoke keys and big players occasionally include revoked keys in trust chains and blast a warning if the revoked key is considered valid.
Failure paths that are not exercised with regularity will inevitably fail in surprising ways when actually needed.