4 ms·
There is no way to prove that every cert from every CA gets logged in CT. How can I know for certain some CA out there is not creating certs and not logging the
by AndyMcConachie 3y ago
There is no way to prove that every cert from every CA gets logged in CT. How can I know for certain some CA out there is not creating certs and not logging them?
- agwa 3y agoCAs can issue certificates without logging them, but such certificates will lack receipts (SCTs) from CT logs, and will be rejected by major browsers.