d...@geer.org wrote:
No, [...]
Now that the main question is answered, there are sub-questions to be asked:
1. Has any public CA ever encountered a situation where a revocation
would have been necessary?
1.1 Has any public CA ever had a disgrunted employee with too many
privileges not revoked on a timely manner?
1.2 Has any public CA ever experienced a corporate reorganization where
a backup HSM has been lost?
1.3 ...
2. Has any public CA ever suspected a situation where a revocation would
have been necessary?
2.1 Has any public CA ever had an audit that identified mismanagement of
signature private key over some extended period of time?
2.2 ...
Regards,
--
- Thierry Moreau
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majord...@metzdowd.com
