3 ms·It's almost like the threat models for CA and leaf certs are different.by akerl_ 9mo agoIt's almost like the threat models for CA and leaf certs are different.LunaSea 9mo agoYes, foot certs are much more sensitive than leaf certs.akerl_ 9mo agoWhich is why root certs are stored in HSMs, there’s a well defined total set of them, and if the owner violates any of the rules around handling of them, the CAB can put them out of business.