News for hackers. Stuff that matters.

A comment on Private key of DigiCert Certificate Transparency log compromised. Parent comment

Re:Private key of DigiCert Certificate Transparency log comp... by cjbprime on Thursday May 28, 2020 @11:49AM (#23338689)
The CT system is built around controlled suspicion, not trust.
[ Parent | on HN ]
Re:Private key of DigiCert Certificate Transparency log comp... by bawolff on Thursday May 28, 2020 @04:41PM (#23342278)
Sure, but if i can't trust someone to run a CT server, why would i trust them to run a CA?
[ Parent | on HN ]
Re:Private key of DigiCert Certificate Transparency log comp... by cjbprime on Thursday May 28, 2020 @06:28PM (#23343651)
It was a 0day in a popular open source package. They didn't do anything wrong. Presumably they use stronger defense in depth, as required by the CA guidelines, to prevent software compromises to the actual CA signing machines. There's no need to go through that level of paranoia for CT log machines.
[ Parent | on HN ]