3 ms·
But how prevalent is it that other clients verify a cert is in a CT log?
by thayne 3y ago
But how prevalent is it that other clients verify a cert is in a CT log?
- tptacek 3y agoThat's not how CT works! You don't have to go check if a cert is in a log! (How many client/embedded systems do fully recursive DNSSEC verification? Zero!)
- thayne 3y agoYou have to check that a cert includes a signature that it was logged, or you risk accepting a certificate that wasn't logged.