News for hackers. Stuff that matters.

A comment on Distrusting New WoSign and StartCom Certificates. Parent comment

Re:Distrusting New WoSign and StartCom Certificates by iancarroll on Tuesday October 25, 2016 @09:11AM (#12787619)
Luckily CT logs are designed to be mostly trustless.
[ Parent | on HN ]
Re:Distrusting New WoSign and StartCom Certificates by 0x0 on Tuesday October 25, 2016 @04:07PM (#12791207)
Yet the Izenpe CT log managed to be untrustworthy enough to be de-listed! https://groups.google.com/a/chromium.org/forum/#!topic/ct-po...
[ Parent | on HN ]
Re:Distrusting New WoSign and StartCom Certificates by iancarroll on Tuesday October 25, 2016 @10:48PM (#12793522)
Indeed. For those curious, CT is designed to "discover" SCTs that were not publicly shown by the log, so that the log can operate without a lot of trust, though this did not happen here (someone just found them operating two logs...)

I guess I'm not the best person to criticize other logs, though. :-)

[ Parent | on HN ]