Re: Online Certificate Revocation Protocol

["Andrew W. Gray" <agray@xxxxxxxxxxxx>]

"Housley, Russ" wrote:
 
> You make an interesting point.  I figure that a message signed with the
> private key that is claiming to be compromised is a good thing to pay
> attention to.
> 
> If the message is from the subscriber, then that subscriber probably knows
> that some bad thing just happened and the subscriber is trying to let
> everyone know.  He does not want any one to rely on the key any more.

Unfortunately, this procedure asserts that the subscriber has possession
of the private key.  The subscriber's key may easily have been deleted /
destroyed / physically stolen by the attacker.

Andrew