2 ms·
> Uh huh. And if I log what addresses reach out to me to check for the presence of a particular certificate in the logs? Again, misunderstanding of how it wor
by aaomidi 3y ago
> Uh huh. And if I log what addresses reach out to me to check for the presence of a particular certificate in the logs?
Again, misunderstanding of how it works.
Logs are checked using the SCT in the certificate. It's a signed "promise" from the CT that the pre-certificate will eventually be appended to the logs in a few hours since submission.
The various root programs monitor to ensure that the promise does in fact happen.
Your browser process does *not* reach out to the CT log on its own.