News for hackers. Stuff that matters.
Re:Private key of DigiCert Certificate Transparency log comp... by Spivak on Thursday May 28, 2020 @02:02PM (#23340344)
Despite being supported, relying on browsers checking CT logs was never something that what going to be deployed at scale because, just like revocation lists, it adds a performance hurdle to every request.

Auditors and monitors are the real protection you get from CT logs.

You get the same problem with any form of DNS validation because you'll never get every little caching server to validate records.

There are no comments on this comment yet.