3 ms·
Conceivably you could also fix this by having all verifiets special case this one certificate in their verification software to substitute the correct hash? Ob
by admax88q 5y ago
Conceivably you could also fix this by having all verifiets special case this one certificate in their verification software to substitute the correct hash?
Obviously that's a huge pain but in theory it would work?
- psanford 5y agoYou really want to make everyone special case this because 1 CT log server had a hardware failure? This is not the first time a log server had to be removed due to a failure, nor will it be the last. The whole protocol is designed to be resilient to this. What would be the point of doing something besides following the normal procedures around log failures?
- admax88q 5y agoI was just asking to check if I understood the problem correctly.
- tialaramex 5y agoYes, in principle you could special case all the verifiers, although that's an open set, the logs are public.