[politelemon]

I'm not seeing how there's no need to revoke. It means a compromised certificate is still considered valid for several days, in which a lot of damage can be done.

[mholt]

Propagating the revocation information often takes about as long.