> but figured Apple almost certainly prohibits that "for security". I don't think so, the concern would be revokation, if someone does a bad thing and Apple pu

> but figured Apple almost certainly prohibits that "for security". I don't think so, the concern would be revokation, if someone does a bad thing and Apple pulls the cert your entire friends would lose access. I wonder if it would make sense to do ring-based instead (r0 being most trusted)