3 ms·
> Huh? Read the post, it's all there: https://blog.okturtles.com/2014/09/the-trouble-with-certificate-transparency/ https://blog.okturtles.com/2014/09/the-trou
by itistoday2 12y ago
> Huh?
Read the post, it's all there: https://blog.okturtles.com/2014/09/the-trouble-with-certificate-transparency/ https://blog.okturtles.com/2014/09/the-trouble-with-certific...
- yuhong 12y agoLooks like a complex attack, and "not all CAs will necessarily have their own log." and same for the converse too.
- itistoday2 12y agoLegitimate SCTs can be used in attacks just as well (this will probably be the common case), as explained here: https://news.ycombinator.com/item?id=9254713 https://news.ycombinator.com/item?id=9254713
- yuhong 12y agoYes, CT would only allow detection. Revocation would be a different problem.