On Tue, Feb 25, 2025 at 03:30:41PM +0000, Jared Mauch wrote:
>       I can imagine a few other cases where a company may be in
> receivership but also think these are likely limited enough whereby
> there would be a chance for discussions on the operational side to give
> the option to remove the delegation until the delegated CA can be
> restored or decomissioned.

My personal experience reaching out to operators of non-functional Delegated
CAs has mostly been "we have no idea what you are talking about".

For example, it is not too far-fetched to imagine a situation where someone
tried to set up a Delegated CA as part of an internship and then left the
company. Imagine that as part of offboarding process all the intern's VM were
destroyed. In such situations, the only remnant of that delegated CA is the (now
dangling) reference from RIPE NCC's systems towards what the intern set up in
the past.

Without an (automated) revocation mechanism, such dangling delegations could
exist in perpetuity, wasting resources of all the validators on this planet.

Kind regards,

Job
-----
To unsubscribe from this mailing list or change your subscription options, 
please visit: https://mailman.ripe.net/mailman3/lists/routing-wg.ripe.net/
As we have migrated to Mailman 3, you will need to create an account with the 
email matching your subscription before you can change your settings. 
More details at: https://www.ripe.net/membership/mail/mailman-3-migration/

Reply via email to