Hacker News new | ask | show | jobs
by orthoxerox 344 days ago
That's why key revocation, like credit card blocking, should be a separate service that is available 24x7. Like, if you know the value of an AWS token, this should be sufficient data for you to call an AWS API that revokes it.
1 comments

That doesn't help if revocation, without renewal means immediate outage.