3 ms·
Correct. I believe Certificate Transparency existed prior to any of the issues with Symantec, but CT was indeed involved in exposing some of the Symantec shenan
by zackelan 10y ago
Correct. I believe Certificate Transparency existed prior to any of the issues with Symantec, but CT was indeed involved in exposing some of the Symantec shenanigans.
https://arstechnica.com/security/2017/01/already-on-probation-symantec-issues-more-illegit-https-certificates/ https://arstechnica.com/security/2017/01/already-on-probatio...
> Ayer discovered the unauthorized certificates by analyzing the publicly available certificate transparency log
That article also links to the primary source, https://www.mail-archive.com/dev-security-policy@lists.mozilla.org/msg05455.html https://www.mail-archive.com/dev-security-policy@lists.mozil... which in turn links to a public viewer for Certificate Transparency logs.