5 ms·
It's not "strictly" more because you reduce the attack surface of your leaf certs through expiration, etc.
by pphysch 4y ago
It's not "strictly" more because you reduce the attack surface of your leaf certs through expiration, etc.
- hedora 4y agoWhat attack does that prevent? If the leaf certs are compromised, then so is the server, and it is already game over.
- pphysch 4y agoIt prevents the attack where thousands of users have thousands of long-forgotten keys lying around, and eventually one of them gets compromised months or years after it was last legitimately used. AKA a huge attack surface that can't reliably be culled, because you are effectively relying on users to be their individual CAs. This particular attack took down my former organization once.