Browsers will make their own policies regarding which log servers they'll trust, similar to the CA system. Google's policy for log server operators is documente

Browsers will make their own policies regarding which log servers they'll trust, similar to the CA system. Google's policy for log server operators is documented here[1] and is fairly strict - a number of third-party log servers have been removed in the past due to non-compliance. Chrome's policy for what they consider a "CT qualified" certificate can be found here[2] and asks for SCTs from at least one Google and non-Google-operated log server. [1]: https://www.chromium.org/Home/chromium-security/certificate-transparency/log-policy https://www.chromium.org/Home/chromium-security/certificate-... [2]: https://a77db9aa-a-7b23c8ea-s-sites.googlegroups.com/a/chromium.org/dev/Home/chromium-security/root-ca-policy/CTPolicyMay2016edition.pdf?attachauth=ANoY7cp77iwZ9ZelVYuyd-0hwC0ddJgwRq9LTwXxY1xux20zjhPoS3o3ZRsyfCrIAe7GJr0S4m174wIm0x-NdopCYQWFUCKcRzvyQl4aUAl5yLRjk-a7rnTrraDlMqdSu8RiG5gjOYRv6sA3-evu_s5dKwMC_Z21wqWe31rWiMsrYrtyXg2c6sJqFrdOCIzq4WIfYX88yEeOsCGA_5HSnx8t5sNWHwWDSedHwAjDm_mJeMa0ocq8XmrTFH6iwndiuQQeNZs97Znvidup6EjXZhyi7Uq7c8h1pQ%3D%3D&attredirects=0 https://a77db9aa-a-7b23c8ea-s-sites.googlegroups.com/a/chrom...