4 ms·
Do CAs have to pay the log providers? From this article it sounds like Google is adding certs to their own log for free. https://www.certificate-transparency.o
by Buge 10y ago
Do CAs have to pay the log providers? From this article it sounds like Google is adding certs to their own log for free.
https://www.certificate-transparency.org/faq https://www.certificate-transparency.org/faq
Also
>Anyone can submit a certificate to a log, although most certificates will be submitted by certificate authorities and server operators.
https://www.certificate-transparency.org/how-ct-works https://www.certificate-transparency.org/how-ct-works
- Manishearth 10y agoI was under the impression that there wasn't any "free to use" log out there, at least not for someone with the volume of a CA. I could be wrong / this might have changed since last year.
- tialaramex 10y agoGoogle's logs are free to use, everybody can shove whatever they like into the Google logs if it chains to a relevant CA. Most logs don't talk to random civilians about this, but at the ct-policy meeting the one log which did speak about their policies said that they either cut a $$$ deal OR they accept a mutual logging arrangement, on the rationale that if you eat the cost of logging their stuff and they eat the cost of logging your stuff, that works out fine for everybody.