I'm trying out revocation of my www.identityblog.com certificate – and changing my site's private key.
Since we are going where few men have gone before, in the worst case this might lead to abnormal behavior for those logging in with Information Cards over the next twenty-four hours.
Identity blog should only be used for demos with an extra dose of caveats until I report back that the test has been concluded.
Normally this would be a ten minute test. But the task is more daunting since I run my blog in ye-olde-typical-hosted environment. I have no direct access to the machines or web servers or configuration – or control over anyone's schedule or priorities.
Techies will understand that when you're not used to this it makes you a bit nervous. But of course this is the way a great many people will experience things – and that's what I'm trying to get a feel for.