3 ms·

2. Even if that was a requirement, they can be faked just like the certificate. Huh?

• itistoday2 12y ago
  > Huh? Read the post, it's all there: https://blog.okturtles.com/2014/09/the-trouble-with-certificate-transparency/ https://blog.okturtles.com/2014/09/the-trouble-with-certific...
  • yuhong 12y ago
    Looks like a complex attack, and "not all CAs will necessarily have their own log." and same for the converse too.
    • itistoday2 12y ago
      Legitimate SCTs can be used in attacks just as well (this will probably be the common case), as explained here: https://news.ycombinator.com/item?id=9254713 https://news.ycombinator.com/item?id=9254713
      • yuhong 12y ago
        Yes, CT would only allow detection. Revocation would be a different problem.