&gt; Ultimately, it was a losing game, because of the inherent conflict of interest between software author and software user.<p>This is <i>exactly</i> what is broken with our current software business models. On-prem software is expensive to deploy and manage but gives users control of their data. SaaS software is cheap to deploy and manage but takes control of the user&#x27;s data. We must find middle ground between the two models. A solution that takes the best of both on-prem software and cloud based SaaS services may be that middle ground, but it&#x27;s going to require a globally federated cloud.<p>Here&#x27;s an article from a few months talking about this concept: <a href="http:&#x2F;&#x2F;venturebeat.com&#x2F;2015&#x2F;05&#x2F;09&#x2F;goodbye-saas-hello-containers-as-a-service&#x2F;" rel="nofollow">http:&#x2F;&#x2F;venturebeat.com&#x2F;2015&#x2F;05&#x2F;09&#x2F;goodbye-saas-hello-contain...</a>. The basic premise is that ISVs should be able to deploy their stacks on-prem, similar to the way they deploy to their SaaS-based solutions today.<p>I&#x27;ve been kicking around a slightly modified vision for a new software model I call MSaaS for about 3 years now after spending an inordinate amount of time thinking about infrastructure trust. MSaaS is short for managed software as a service. The idea is to build a federated platform for storing&#x2F;signing code and images used to deploy applications, infrastructure deployment targets which carry various levels of trust, and a method for payments and identity management for settling resource consumption, including development time.<p>First, MSaaS needs to have a means by which an ISV&#x27;s software components, such as source code or images, can be placed an immutable data structure similar to a blockchain. IPFS&#x27; merkle DAG is one such example of a blockchain that allows for <i>immutable</i>, <i>decentralized</i> data storage with signing capabilities. It allows for a company to sign a given piece of code, stuff it, and the accompanying configuration information, into an immutable data store, and make it globally accessible in a trust-less manner (i.e. anyone can fetch it anonymously). Bits can be signed and&#x2F;or encrypted using public keys where needed for privacy and security.<p><i>Side Note</i>: IPFS has an <i>interesting</i> &#x27;problem&#x27; with it in that if a node containing data goes away, it is lost from the network. That&#x27;s actually acceptable here regarding the source code or images users would need to pull to run applications or services as the code could be pulled from one or more centralized repositories (Github) by a trusted authority, built into an image, re-signed and then placed back on the network on-demand. Keys&#x2F;configuration bits could be shared in a similar manner, or handled a tad bit differently for backups.<p>Second, MSaaS will introduce the idea of multiple trusted deployment target endpoints, such as those provided by AWS, Digital Ocean, OpenStack running on-prem in a DC, or even your local computer. These deployment targets respond to cryptocurrency payments and provision themselves where the trust levels exist between parties (or depending on the use-case, don&#x27;t exist) using the data stored in the previously mentioned merkle DAG&#x2F;blockchain. The payments themselves represent identity in the form of signing keys (which can be related to the keys used to sign the code&#x2F;images) and payment for resources, perhaps including a managed service provider along the way. For example, if your images need to be built from code, you enter into a relationship with XYZ Container Builders, Inc. and they become responsible for building and signing your images. Payment chains are used to tie these transactions together.<p>Finally, we&#x27;ll need search engines to assemble all this together into a cohesive offering that anyone can join or use. Searches for trust, compute power, storage costs, network speeds, container specs, etc. can all be included in the results returned.<p>I would note that the first thing people usually ask when I talk about this stuff is &quot;How can I trust XYZ provider with my data&#x2F;code?&quot;.  The answer is that you establish relationships with individuals who provide you software and&#x2F;or infrastructure that is a fit based on your particular use-case&#x27;s trust needs. If you have sensitive data you don&#x27;t trust anyone with, then deploy the application on-prem in your own cloud and don&#x27;t allow the software company to remotely manage it. If it&#x27;s a CI test on a public repo, who cares who does that as long as consensus is reached on the outcome over time?