Hacker News new | ask | show | jobs
by Ajedi32 2991 days ago
> ACME account you are revoking from has a valid authorization for all of the DNS identifiers on the certificate being revoked

Does this mean that if GitHub did what CloudFlare does and batched multiple domains they serve into the same cert you wouldn't be able to revoke it?

I guess with a 90-day expiry it's not that big of a deal...

1 comments

Yeah, that's a good point too.