You say that we're talking about a server-side protocol here. But this means that whatever scheme we use must be proof agains munging by injectors and newsreaders, as well as transports. To do that, it is important to have key revocation. OTOH, I do not think it so essential to have instant regognition of revocations.
Most people revoke because they want to start using a new key, and they just stop using the old one.
Author view This archive was generated by hypermail 2b29 .