RE: [caops-wg] Name Constraints - attempt at framing issues

3) If a CA is compromised, given currently implementations, this will result in the compromise of all certificates issued by that CA. An additional threat that a CA compromise would result in, is the compromise of privileges bound to certificates issued by other CAs, at relying parties that trust the compromised CA. Is this threat of concern to us?

Von -- can you describe this? I can't figure out what this means. BC