News for hackers. Stuff that matters.

A comment on Running the "Reflections on Trusting Trust" Compiler. Parent comment

Re:Running the "Reflections on Trusting Trust" Compiler by charcircuit on Thursday October 26, 2023 @11:19AM (#38026748)
SSL transparency logs are not a thing.

Certificate Transparency logs only show when new certificates are issued. If a certificate is stolen it is of no use.

[ Parent | on HN ]
Re:Running the "Reflections on Trusting Trust" Compiler by penteract on Thursday October 26, 2023 @01:02PM (#38028490)
They help people discover if the certificate authority's private key has been stolen/misused.
[ Parent | on HN ]
Re:Running the "Reflections on Trusting Trust" Compiler by rocqua on Saturday October 28, 2023 @09:18AM (#38049561)
They are meant to detect issuers misbehaving, not individual SSL certs leaking.

It lets issuers show they are trustworthy.

[ Parent | on HN ]