On Tue, Feb 25, 2025 at 03:30:41PM +0000, Jared Mauch wrote:
I can imagine a few other cases where a company may be in receivership but also think these are likely limited enough whereby there would be a chance for discussions on the operational side to give the option to remove the delegation until the delegated CA can be restored or decomissioned.
My personal experience reaching out to operators of non-functional Delegated CAs has mostly been "we have no idea what you are talking about". For example, it is not too far-fetched to imagine a situation where someone tried to set up a Delegated CA as part of an internship and then left the company. Imagine that as part of offboarding process all the intern's VM were destroyed. In such situations, the only remnant of that delegated CA is the (now dangling) reference from RIPE NCC's systems towards what the intern set up in the past. Without an (automated) revocation mechanism, such dangling delegations could exist in perpetuity, wasting resources of all the validators on this planet. Kind regards, Job