I strongly dislike the idea of a CA going around revoking certs&#x2F;keys just because the keys were leaked somewhere.<p>This road (as wished for by the author) is very dangerous - it reads to me: &quot;If a software(-bug) or human error allows technically skilled personal to gain access to a private key, all connected keys shall be revoked&quot;.<p>This would apply to (possibly) millions of servers with e.g. vulnerable PHP versions or such stuff.<p>So. Torrents Time made a bad move. Why is that a CA-concern? Honestly, tell me.