Re:Distrusting New WoSign and StartCom Certificates
by iancarroll on Tuesday October 25, 2016 @10:48PM
(#12793522)
Indeed. For those curious, CT is designed to "discover" SCTs that were not publicly shown by the log, so that the log can operate without a lot of trust, though this did not happen here (someone just found them operating two logs...)
I guess I'm not the best person to criticize other logs, though. :-)
I guess I'm not the best person to criticize other logs, though. :-)