3 ms·
> Everyone agrees that no evidence of mal-issued certificates exists. This is one thing CT logs are useful for. As soon as logging certificates to a public l
by pifm_guy 4y ago
> Everyone agrees that no evidence of mal-issued certificates exists.
This is one thing CT logs are useful for. As soon as logging certificates to a public log becomes commonplace, then misissued certificates can't be used in private without a high chance of the world being told about what's going on.
- j33zusjuice 4y agoNice. I had no idea such a thing existed, tbh.
- snoopy_telex 4y agoDon’t you have to trust the CA to actually log all the certs they issue? What’s to stop a rogue CA from logging all but a few key certs?
- pifm_guy 4y agoAnyone else can log a cert too. There was talk of Chromium logging any cert that chains to a public root that they find un-logged.