Re:Distrusting New WoSign and StartCom Certificates
by 0x0 on Tuesday October 25, 2016 @04:07PM
(#12791207)
Yet the Izenpe CT log managed to be untrustworthy enough to be de-listed! https://groups.google.com/a/chromium.org/forum/#!topic/ct-po...
[ Parent
| on HN ]
Re:Distrusting New WoSign and StartCom Certificates
by iancarroll on Tuesday October 25, 2016 @10:48PM
(#12793522)
Indeed. For those curious, CT is designed to "discover" SCTs that were not publicly shown by the log, so that the log can operate without a lot of trust, though this did not happen here (someone just found them operating two logs...)
I guess I'm not the best person to criticize other logs, though. :-)