Hacker News new | ask | show | jobs
by nebezb 155 days ago
The poster you originally replied to is suggesting this for revoking the attackers keys. Not for revocation of their own keys…
1 comments
securesaml 155 days ago
there's still some risk of publishing an attacker's key. For example, what if the attacker's key had access to sensitive user data?
link
throwawaysleep 154 days ago
All the more reason to nuke the key ASAP, no?
link