Any pointers on what the encapsulation for that would look like? It seems like one good option, but I'd say it's only feasible if it doesn't require work on the

Any pointers on what the encapsulation for that would look like? It seems like one good option, but I'd say it's only feasible if it doesn't require work on the part of the manufacturer. My other thought was just mandating a method of loading CA certs onto all IoT devices using an open standard connector. If the owner so chooses.