> > What do you think? > > i suspect that ops who run delegated tend toward wanting control; and > would be disinclined to publish back at parent. but, back in the day > when we designed this stuff, we had the idea that there might be highly > scaled providers of publication services not associated with any CA. > </hint>
Not our experience here in Brazil. People liked that they could run their CA at a modest CPU (Raspberry Pi, low resource VM etc.) and only allow the NIR publishing service / ROA signing service to interact with it. Rubens
