> Should that still say something about the server revoking authz? Since there is no way to revoke that once the account key is revoked (unless we do the auto-revoke thing when authz is obtained for another account key).
I think from the previous discussion, the best way to do this is by auto-deactivating authzs once they are superseded. I'm not including that in this change because I wanted to keep it small and do that as a follow-on. _______________________________________________ Acme mailing list [email protected] https://www.ietf.org/mailman/listinfo/acme
