I see! I was thinking about it backwards. This helps a lot.

My recommendation is that you should run VLS on hardware you have domiciled in your home/office/bunker/citadel.  So actually the reverse: someone else runs your node software, YOU run VLS on your own hardware.  I believe this is what Greenlight intends to provide as a service.

The important part is "not your keys not your coins" IMO.  Having someone else run the VLS means the one holding the keys --- the signer --- is someone else, not you.

ZmnSCPxj

Do you see a world where VLS is offered as a third-party service?

ie. I run a routing node, I want to up my security. Someone offers a service where they spin up and run my VLS in a TEE or something like Enclavia and I just specify the policies?

Hi, we're the team from Validating Lightning Signer, AMA!

jackronaldi

Do you see a world where VLS is offered as a third-party service? 

ie. I run a routing node, I want to up my security. Someone offers a service where they spin up and run my VLS in a TEE or something like Enclavia and I just specify the policies?