mozilla/browserid — Issue #599: must be able to update domain key at any time
Author: lloyd
Created: 2011-11-17 23:39:31+00:00
State: open

We must be able to centrally invalidate the domain key. This would be used in cases where we want to change it, like to increase the keylength or change from RSA to DSA, or in the horribly unlikely case we have key compromise.

Suggested implementation tactic is to ship down a `cert_version` key in session_context and if that doesn't match in storage keys, purge them at dialog startup.