Is there an official term for CAs that issue end-entity certificates (as opposed to issuing SubCA certs)?
@randomoracle @pzb If they're only supposed to issue leaf certs, you can enforce it with pathlen constraints. This is quite common I think.
-
-
@randomoracle@pzb I've only ever heard it called "constrained" (i.e. via basicContraints), as opposed to an unconstrained CA. -
- 1 more reply
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.