Running the "Reflections on Trusting Trust" Compiler

Re:Running the "Reflections on Trusting Trust" Compiler by penteract on Thursday October 26, 2023 @07:50AM (#38024336)

That argument would mean that SSL transparency logs are pointless.

I'd argue that if the key being stolen/misused becomes more easily detectable, signing with said key becomes more meaningful.

[ Parent | on HN ]

Re:Running the "Reflections on Trusting Trust" Compiler by charcircuit on Thursday October 26, 2023 @11:19AM (#38026748)

SSL transparency logs are not a thing.

Certificate Transparency logs only show when new certificates are issued. If a certificate is stolen it is of no use.

[ Parent | on HN ]

Re:Running the "Reflections on Trusting Trust" Compiler by penteract on Thursday October 26, 2023 @01:02PM (#38028490)

They help people discover if the certificate authority's private key has been stolen/misused.

[ Parent | on HN ]

Re:Running the "Reflections on Trusting Trust" Compiler by rocqua on Saturday October 28, 2023 @09:18AM (#38049561)

They are meant to detect issuers misbehaving, not individual SSL certs leaking.

It lets issuers show they are trustworthy.

[ Parent | on HN ]