3 ms·
Thanks for replying to what was a rather half-baked question, typed out in some excitement. I guess a more thought-through version is as follows: Currently, th
by gnfargbl 3y ago
Thanks for replying to what was a rather half-baked question, typed out in some excitement.
I guess a more thought-through version is as follows: Currently, the CT logs with state == usable are operated by only six entities (Cloudflare, DigiCert, Google, LE, Sectigo, TrustAsia). In the earlier days of CT logs, there were a larger number of log operators. I think it's a reasonable assumption that we've ended up in the current situation at least partly because of the cost of log operation?
Since Sunlight aims to drastically reduce the cost of log operation, might we expect the number of log operators to rise, and if so would there be likely changes to the ways that log operators are enumerated as "trusted", or would things likely be as they are now?
- mcpherrinm 3y agoI do hope we get some more log operators. We've discussed with a couple organizations that are potentially interested, so I'm hopeful we get another 2 or 3 soon. Cost of log operation is definitely a big part of it, but I think the operational overhead of existing log software is also an issue (which is also cost, but in engineering time).