3 ms·

Can't the website owner make quite easily as much TLS proofs as he wants?

• px43 10y ago
  Yes, that's addressed in the paper. If a website owner notices a bounty on their own site, they can very quickly generate the proof needed to collect the bounty without suffering any downtime.
• viraptor 10y ago
  As mentioned it's addressed. But also there's an easy defence of just updating the certificate key if under such attack. With Let's encrypt around, getting a new certificate is not a huge deal anymore. And rekeying is possible with some other services as well.
  • schoen 10y ago
    > With Let's encrypt around, getting a new certificate is not a huge deal anymore. You'd hit the rate limit pretty quickly, though, if you had to keep doing this repeatedly on the same day!