> I agree. A Trust Store Anchor may correspond to a TAA, but
> the trust anchors that are installed clearly do not (e.g.,
> Verisign's trust anchors will be installed by a lot of
> entities that aren't part of Verisign).
I don't think we should preclude the use of application TAs as TSAs. An application TA could function a trust store anchor in cases where an enterprise TA is be used to sign TA management requests and serves as the root of a PKI, for example.