3 ms·
tl;dr: By using the CT logs as a trusted timestamping service, if I understand it correctly?
by lxgr 2y ago
tl;dr: By using the CT logs as a trusted timestamping service, if I understand it correctly?
- tptacek 2y agoMore broadly, because longstanding universal adoption of CT makes it possible for root programs to grandfather in older certificates, so that they can axe a CA without generating SSL errors for all that CA's existing certificates, which is something they couldn't do before.