> But, setting up a private CA is no easy feat The amount of hours I've seen companies spend trying to get private CAs to work with all their dev tools (like a

> But, setting up a private CA is no easy feat The amount of hours I've seen companies spend trying to get private CAs to work with all their dev tools (like artifact repositories, etc.) often outweighs the benefits. If you have a highly centralized process for setting up developers machines it can work, but you will probably dramatically underestimate how much time and troubleshooting will be involved.