4 ms·
The CT system is built around controlled suspicion, not trust.
by cjbprime 6y ago
The CT system is built around controlled suspicion, not trust.
- bawolff 6y agoSure, but if i can't trust someone to run a CT server, why would i trust them to run a CA?
- cjbprime 6y agoIt was a 0day in a popular open source package. They didn't do anything wrong. Presumably they use stronger defense in depth, as required by the CA guidelines, to prevent software compromises to the actual CA signing machines. There's no need to go through that level of paranoia for CT log machines.