blast-radius

Virtual Keys vs Master Key: Designing Blast Radius

One leaked key shouldn't compromise everything. Here is how separating a master key for management from per-use virtual keys bounds the damage of a leak — and why customer traffic never touches the master key.