Comment by morningsam

>not every global .com website owner wants to use only have the choice of US-run CAs

.com wouldn't be covered by the proposal made in the post I replied to, because it isn't a ccTLD.

I also disagree with the post author's clarification in a sibling comment, saying that there should be a few major (US) CAs that can sign everything: As I originally understood it, the idea would really be to restrict signing of certs for ccTLD domains to CAs in the country in question, and only to those. There would not be a US CA that can sign certs for French domains and vice versa.

>most Rust projects (foo.rs) would probably not trust the Serbian CAs

Such domains are misuses of ccTLDs as originally envisioned anyway, and AFAIK the relevant standards bodies still see it that way, too.

>it seems possible that Chinese website owners might prefer to use non-Chinese CAs

For what reason? If it's a matter of resistance to government interference, it doesn't help, because ccTLD DNS records are ultimately under the control of that country's government anyway. It might make sense for very small countries in which operating a CA full-time isn't worth it for anyone; perhaps it should be possible for those to be grouped together, sure.