6 ms·
>DNSChain/Blockchains already provide certificate transparency (publicly auditable log of certs issued), and they do a far better job of it than Certificate Tra
by nickodell 12y ago
>DNSChain/Blockchains already provide certificate transparency (publicly auditable log of certs issued), and they do a far better job of it than Certificate Transparency.
Better in what way?
- itistoday2 12y agoWe wrote a blog post to answer this question: https://blog.okturtles.com/2015/03/certificate-transparency-on-blockchains/ https://blog.okturtles.com/2015/03/certificate-transparency-...
- nickodell 12y ago>The CT spec allows only one SCT to accompany a certificate, making this attack feasible No, it doesn't. It describes the format of multi-SCT on page 16, and it explains the rationale for this (basically all of the points you brought up) on page 32.
- itistoday2 12y ago> No, it doesn't. It describes the format of multi-SCT on page 16, and it explains the rationale for this (basically all of the points you brought up) on page 32. I see the wording wasn't very clear, so I removed the word "only" to make the meaning clearer. It now reads: "The CT spec allows one SCT to accompany a certificate, making this attack feasible" Good catch. :)
- deleted 12y ago[deleted]