Re: [tor-dev] proposal 240: Early signing key revocation for directory authorities.

On Sat, 10 Jan 2015, Nick Mathewson wrote:

This proposal describes a simple way for directory authorities to perform signing key revocation.

2. Specification

   We add the following lines to the authority signing certificate format:

   revoked-signing-key SP algname SP FINGERPRINT NL

Why not implictly revoke any previous signing key when we see a new, valid signing key certificate with a later published timestamp?

It would appear to be simpler and require less state.

Cheers,