diff --git a/book/source/04-certificates.md b/book/source/04-certificates.md index ec3e9e1..cd4bdb7 100644 --- a/book/source/04-certificates.md +++ b/book/source/04-certificates.md @@ -229,11 +229,11 @@ Additionally, OpenPGP allows modeling User ID-specific preferences. The idea is ## Revocations -```{admonition} TODO -:class: warning +When the owner of a certificate wants to invalidate some components of that certificate, or the entire certificate, they can do so by "revoking" the component in question. Revoking the primary key renders the entire certificate invalid. -This section needs to be written -``` +More on revoking components of a certificate in {ref}`self-revocations`. + +Note that there are other ways besides revocations in which components can become invalid. For example, the component's expiration time may have passed. ## Third-party (identity) certifications