You wouldn’t necessarily have to actually give a CA any details about yourself, just integrate this into the existing ISP portals.
An adult can log into the provider’s website and click to generate any client certs they need.
I think this method is maybe a bit _too_ technical (compared to a simple captive portal like you get on public wifi) but I think it would work okay as long as end-users didn’t have to go to a 3rd-party or provide any additional information to their ISP to use it.
@PriorProject @PorkrollPosadist
All the examples you provided were infrastructure, not social communities, so I think it’s a poor comparison.
Instead, I’d compare AP federation to _social_ constructs. Communities, clubs, groups of friends. Even larger constructs like cities or nation states.
In _those_ examples it’s clear that limiting association is commonplace and healthy.