[konha]

> It's not rare, it happens constantly in enterprise software, project managemment software, anything where you have collaboration

The number of revoked tokens compared to all active tokens should still be tiny in those systems, wouldn’t you agree?

> Everyone else wants immediate revocation of rights, not waiting for a token to expire.

With a revocation list you can still have that. Once you propagated your revocation to all relying parties the token effectively expires early.

[zaphar]

The size of the revocation list is irrelevant. As soon as you have to do a call to get the revocation list you might as well just include the rest of it in the call as well.