One of the most fundamental design principals when designing a secure system is that of least privilege, in the case of CAs one scenario where this can be applied is the subordination of another CA. The application of this concept in this scenario is referred to as qualified subordination,  it was first formalized in the … Continue reading Least Privilege and Subordinate Certificate Authorities