After issuance a technician becomes aware that some keys were issued to individuals who are not authorized to use them. Which of the following should the technician use to correct this problem?
A.
Recovery agent
B.
Certificate revocation list
C.
Key escrow
D.
Public key recovery
(B is my answer —CRL)Certificate revocation is intended to convey a complete withdrawal of trust in an SSL certificate and thereby protect the people using a site. However, some browsers handle crl so carelessly that frequent users and its admins can keep using a revoked certificate for weeks w/o knowing anything is amiss. Recently, this was illustrated when a e-commerce site was still using an intermediate certificate more than a week afte revocation.