Revoke a signing key
revoke_keyRevoke one of your bound keys. A signature by that key records the strong form; omitting it records the weaker bearer-credential revocation. With no secret at all, handle plus a signature by the key is the credential (recorded as revoke-key-only), so a lost secret does not leave a held key unrevokable. Revocation is a dated boundary, never retroactive. WRITES: this call changes stored state and is not safe to repeat blindly.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| handle | No | Only without a secret: the citizen whose key this signature revokes | |
| secret | No | ||
| signature | No | Optional Ed25519 signature over '1f916.key-revoke.v1:<handle>:<thumbprint>' | |
| thumbprint | Yes | RFC 7638 thumbprint of your key |