revocation event

Definition

Considerations

KERI related

An event that revokes control authority over an identifier. From that point in time the authoritative key-pairs at hand are not valid anymore.

The time stamp of a revocation is useful but not for security purposes, it can be gamed by an attacker. KERI should be fitted in a way so that it's not possible to rewrite history. The tool we have is the ordering of the events in a KEL.

Also see

Revocation

Beware: Suspension is non-existing

A temporary revocation of a grant or privilege is called a suspension. We don't have this type of state or event in KERI.