Single random bit flip causes error in certificate transparency log

Re:Single random bit flip causes error in certificate transp... by admax88q on Sunday July 04, 2021 @03:33PM (#27732024)

Conceivably you could also fix this by having all verifiets special case this one certificate in their verification software to substitute the correct hash?

Obviously that's a huge pain but in theory it would work?

[ Parent | on HN ]

Re:Single random bit flip causes error in certificate transp... by psanford on Sunday July 04, 2021 @04:40PM (#27732450)

You really want to make everyone special case this because 1 CT log server had a hardware failure?

This is not the first time a log server had to be removed due to a failure, nor will it be the last. The whole protocol is designed to be resilient to this.

What would be the point of doing something besides following the normal procedures around log failures?

[ Parent | on HN ]

Re:Single random bit flip causes error in certificate transp... by admax88q on Monday July 05, 2021 @11:04AM (#27738688)

I was just asking to check if I understood the problem correctly.

[ Parent | on HN ]

Re:Single random bit flip causes error in certificate transp... by tialaramex on Monday July 05, 2021 @05:22PM (#27741944)

Yes, in principle you could special case all the verifiers, although that's an open set, the logs are public.

[ Parent | on HN ]