boulder
boulder copied to clipboard
Move account key checks from WFE to RA
The RA should perform any checks (is it weak? is it in the blocked-keys list? etc) on the newly-supplied key, rather than leaving that to the WFE.
Originally posted by @aarongable in https://github.com/letsencrypt/boulder/pull/7735#discussion_r1823376809