I've read about different signature schemes which for the same bits of security differ largely in the size of the public key: The ones proven in the standard oracle model perform worse than the ones proven in the random oracle model. I understand that a difference in the size of a signature is important in case the signature is sent along the data which was signed.
However, what are the negative effects of a large public key? What comes to my mind is that this could be an issue in embedded hardware which is limited in storing capacity. Might this be an issue in other scenarios as well? E.g. are there protocols in which public keys are included in packets and thus take up important space?