>> i suspect that ops who run delegated tend toward wanting control; and >> would be disinclined to publish back at parent. but, back in the day >> when we designed this stuff, we had the idea that there might be highly >> scaled providers of publication services not associated with any CA. >> </hint> > > Not our experience here in Brazil. People liked that they could run > their CA at a modest CPU (Raspberry Pi, low resource VM etc.) and only > allow the NIR publishing service / ROA signing service to interact > with it.
cool. i stand corrected. randy
