4 ms·

More importantly, how secure will the monitor be, and how flexible the monitor system will be? Will Chrome be hard-coded to only trust Google monitors, forcing

More importantly, how secure will the monitor be, and how flexible the monitor system will be? Will Chrome be hard-coded to only trust Google monitors, forcing the whole trust chain to be held at ransom by a single private entity?

Natanael_L 10y ago
If it would, use Chromium and monitors you trust. If Google's own monitors would miss critical events that others didn't, they'd be blamed and shamed. If they didn't share knowledge of critical events which other monitors for whatever reason couldn't detect, they'd be attacked in media. The most plausible outcome is that all major monitors will share data openly. There's no point with a public certificate transparency scheme if they don't. As for the security (ability to report on critical events) of individual monitors, you have to read up on the guarantees that the CT logs can provide.
pfg 10y ago
Browsers will make their own policies regarding which log servers they'll trust, similar to the CA system. Google's policy for log server operators is documented here[1] and is fairly strict - a number of third-party log servers have been removed in the past due to non-compliance. Chrome's policy for what they consider a "CT qualified" certificate can be found here[2] and asks for SCTs from at least one Google and non-Google-operated log server. [1]: https://www.chromium.org/Home/chromium-security/certificate-transparency/log-policy https://www.chromium.org/Home/chromium-security/certificate-... [2]: https://a77db9aa-a-7b23c8ea-s-sites.googlegroups.com/a/chromium.org/dev/Home/chromium-security/root-ca-policy/CTPolicyMay2016edition.pdf?attachauth=ANoY7cp77iwZ9ZelVYuyd-0hwC0ddJgwRq9LTwXxY1xux20zjhPoS3o3ZRsyfCrIAe7GJr0S4m174wIm0x-NdopCYQWFUCKcRzvyQl4aUAl5yLRjk-a7rnTrraDlMqdSu8RiG5gjOYRv6sA3-evu_s5dKwMC_Z21wqWe31rWiMsrYrtyXg2c6sJqFrdOCIzq4WIfYX88yEeOsCGA_5HSnx8t5sNWHwWDSedHwAjDm_mJeMa0ocq8XmrTFH6iwndiuQQeNZs97Znvidup6EjXZhyi7Uq7c8h1pQ%3D%3D&attredirects=0 https://a77db9aa-a-7b23c8ea-s-sites.googlegroups.com/a/chrom...
skywhopper 10y ago
That's the real trick in a trust-based system. We have multiple CAs to prevent single points of failure or control, but now that there are so many CAs, and well-known powerful actors seeking to exploit CAs, there's a need for more oversight and enforcement, which leads back to a central authority and a single point of failure and control.
mikecb 10y ago
Chromium has a CT policy in place, and the Google CT team and the Chromium team who make inclusion decisions are separate, so currently this is working well. There are a number of non-google logs currently included.

Natanael_L 10y ago

If it would, use Chromium and monitors you trust. If Google's own monitors would miss critical events that others didn't, they'd be blamed and shamed. If they didn't share knowledge of critical events which other monitors for whatever reason couldn't detect, they'd be attacked in media. The most plausible outcome is that all major monitors will share data openly. There's no point with a public certificate transparency scheme if they don't. As for the security (ability to report on critical events) of individual monitors, you have to read up on the guarantees that the CT logs can provide.

pfg 10y ago

Browsers will make their own policies regarding which log servers they'll trust, similar to the CA system. Google's policy for log server operators is documented here[1] and is fairly strict - a number of third-party log servers have been removed in the past due to non-compliance. Chrome's policy for what they consider a "CT qualified" certificate can be found here[2] and asks for SCTs from at least one Google and non-Google-operated log server. [1]: https://www.chromium.org/Home/chromium-security/certificate-transparency/log-policy https://www.chromium.org/Home/chromium-security/certificate-... [2]: https://a77db9aa-a-7b23c8ea-s-sites.googlegroups.com/a/chromium.org/dev/Home/chromium-security/root-ca-policy/CTPolicyMay2016edition.pdf?attachauth=ANoY7cp77iwZ9ZelVYuyd-0hwC0ddJgwRq9LTwXxY1xux20zjhPoS3o3ZRsyfCrIAe7GJr0S4m174wIm0x-NdopCYQWFUCKcRzvyQl4aUAl5yLRjk-a7rnTrraDlMqdSu8RiG5gjOYRv6sA3-evu_s5dKwMC_Z21wqWe31rWiMsrYrtyXg2c6sJqFrdOCIzq4WIfYX88yEeOsCGA_5HSnx8t5sNWHwWDSedHwAjDm_mJeMa0ocq8XmrTFH6iwndiuQQeNZs97Znvidup6EjXZhyi7Uq7c8h1pQ%3D%3D&attredirects=0 https://a77db9aa-a-7b23c8ea-s-sites.googlegroups.com/a/chrom...

skywhopper 10y ago

That's the real trick in a trust-based system. We have multiple CAs to prevent single points of failure or control, but now that there are so many CAs, and well-known powerful actors seeking to exploit CAs, there's a need for more oversight and enforcement, which leads back to a central authority and a single point of failure and control.

mikecb 10y ago

Chromium has a CT policy in place, and the Google CT team and the Chromium team who make inclusion decisions are separate, so currently this is working well. There are a number of non-google logs currently included.