20 Sep
2021
20 Sep
'21
7:54 p.m.
i suspect that ops who run delegated tend toward wanting control; and would be disinclined to publish back at parent. but, back in the day when we designed this stuff, we had the idea that there might be highly scaled providers of publication services not associated with any CA. </hint>
Not our experience here in Brazil. People liked that they could run their CA at a modest CPU (Raspberry Pi, low resource VM etc.) and only allow the NIR publishing service / ROA signing service to interact with it.
cool. i stand corrected. randy