Hacker News Reader

The $25 fee is a bad move but if you don't revoke your old (compromised) certificate, new connections would still be secure if you switched certificate, correct?

View on HN

No they wouldn't, because the MITM attacker would simply use the old one. And the user wouldn't know. That's why the old one needs to be revoked.

It's still possible for a MITM to use the old certificate.

Reply on news.ycombinator.com