Unverified50% confidenceFactExact time
PGP achieves key revocation through revocation certificates, which must be actively published by the private key holder (or a pre-designated revoker); S/MIME relies on the CA to publish revocation status via CRL or OCSP.
1
Sources
50%
Confidence
Long-term
Relevance
11/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe commercial CA system relies on CRL and OCSP to propagate revocation information, but revocation propagation is delayed, some clients do not check OCSP strictly, and revocation of an interception certificate affects all traffic relying on that intermediate CA.63% similarUnverifiedThe scope of permission removal should cover application-layer permissions, system accounts, shared resource access, and any API keys or service tokens that may exist.63% similarUnverified个人自用工具可以通过在终端执行xattr -cr命令绕过Gatekeeper限制，或使用自签名证书完成本地部署62% similarUnverifiedEnterprises should enforce mutual TLS (mTLS) and ensure that target systems only accept traffic from the gateway IP and carrying the gateway's cryptographic signature, in order to prevent agents from bypassing the gateway to execute tool calls.60% similarUnverified目前主流的RAG访问控制方案可归为三种路线：代理令牌（On-behalf-of tokens）、实时ACL重查（Live ACL re-checks）与父级细粒度授权（Parent-level fine-grained authorization）。59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1122885API
curl https://kongchang.com/api/v1/knowledge/claims/1122885MCP
get_claim(id=1122885)