2 ms·
My understanding is that Certificate Transparency (https://www.certificate-transparency.org/ https://www.certificate-transparency.org/) is pretty much that. "C
by colemickens 8y ago
My understanding is that Certificate Transparency (https://www.certificate-transparency.org/ https://www.certificate-transparency.org/) is pretty much that.
"Certificate Transparency helps eliminate these flaws by providing an open framework for monitoring and auditing SSL certificates in nearly real time. Specifically, Certificate Transparency makes it possible to detect SSL certificates that have been mistakenly issued by a certificate authority or maliciously acquired from an otherwise unimpeachable certificate authority. It also makes it possible to identify certificate authorities that have gone rogue and are maliciously issuing certificates."
"Certificate Transparency logs use a special cryptographic mechanism to facilitate public auditing of certificates and logs. This special cryptographic mechanism, known as a Merkle hash tree, is a simple binary tree consisting of hashed leaves and nodes (see figure 1)."