diff --git a/book/source/05-private.md b/book/source/05-private.md index 85cf6e9..7f96d88 100644 --- a/book/source/05-private.md +++ b/book/source/05-private.md @@ -96,8 +96,7 @@ Designs of private key subsystems in the OpenPGP space differ: Either way: at most, a private key subsystem should need access to individual component keys and the associated private key material. -```{admonition} TODO -:class: warning +```{note} Keeping a copy of the full certificate information in the private key subsystem can cause "split brain" problems. E.g.: expiration times could then differ between different subsystems, when they keep different copies of the certificate information.