{"action":"opened","issue":{"url":"https://api.github.com/repos/letsencrypt/acme-spec/issues/116","labels_url":"https://api.github.com/repos/letsencrypt/acme-spec/issues/116/labels{/name}","comments_url":"https://api.github.com/repos/letsencrypt/acme-spec/issues/116/comments","events_url":"https://api.github.com/repos/letsencrypt/acme-spec/issues/116/events","html_url":"https://github.com/letsencrypt/acme-spec/issues/116","id":72306084,"number":116,"title":"Improve revocation process","user":{"login":"jsha","id":220205,"avatar_url":"https://avatars.githubusercontent.com/u/220205?v=3","gravatar_id":"","url":"https://api.github.com/users/jsha","html_url":"https://github.com/jsha","followers_url":"https://api.github.com/users/jsha/followers","following_url":"https://api.github.com/users/jsha/following{/other_user}","gists_url":"https://api.github.com/users/jsha/gists{/gist_id}","starred_url":"https://api.github.com/users/jsha/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jsha/subscriptions","organizations_url":"https://api.github.com/users/jsha/orgs","repos_url":"https://api.github.com/users/jsha/repos","events_url":"https://api.github.com/users/jsha/events{/privacy}","received_events_url":"https://api.github.com/users/jsha/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-04-30T23:10:26Z","updated_at":"2015-04-30T23:10:26Z","closed_at":null,"body":"Right now, if you have a private key and want to revoke the corresponding certificate, you submit an ACME revocation request signed by that private key. Ideally we should only ever sign ACME messages with account keys, not cert keys. We should change the flow to include some other form of proof that you control the corresponding private key."}}