Of course, I was only speculating about the scale required to make several thousands of signature per second. Your second point stands, though. It's probably a

Of course, I was only speculating about the scale required to make several thousands of signature per second. Your second point stands, though. It's probably a waste of CPU to mitigate fault attacks in a Lets Encrypt like use case.