Revocation Registry DemoRegistry
| State | Document | Effect on clients |
|---|---|---|
| active | /revocation/active.json | Manifest may be used according to policy. |
| suspended | /revocation/suspended.json | Restricted uses are refused until status changes. |
Governance keys
Two keys must sign. One compromised key cannot revoke an origin, and one compromised key cannot restore a suspended one. The fingerprints are published in the documents themselves.