3 ms·
As far as I’m aware no, but it would allow the holder to resign a new keypair and Person in the middle traffic, provided they’re able to intercept and modify tr
by hsbauauvhabzb 5y ago
As far as I’m aware no, but it would allow the holder to resign a new keypair and Person in the middle traffic, provided they’re able to intercept and modify traffic
- wolrah 5y agoCorrect, and certificate transparency exists pretty much specifically to counter this threat. By requiring certificates to be publicly logged to be valid it becomes trivial for domain owners to monitor all publicly valid certificates in existence for their domain(s). A CA that has been compromised or is being compelled by a government can still issue a valid certificate, but it becomes impossible to hide both that it was done and who did it.