alt Hacker NewsCertificate transparency requirements effectively take the power away from certificate authorities.
They instead place the burden on individual webmasters again to actually verify that nobody has been falsely issuing for their domains. There are also some new vulnerabilities about CT logs who might be malicious.
I agree this is a burden placed on domain owners, but who else can know if a certificate for my domain 'scotthelme.co.uk' was supposed to be issued other than me, the owner of 'scotthelme.co.uk'?
Do you have any info on the malicious CT logs? I'd be interested to read something on that!