logoalt Hacker News

Scott_Helme_ • yesterday at 4:53 PM • 2 replies • view on HN

I agree this is a burden placed on domain owners, but who else can know if a certificate for my domain 'scotthelme.co.uk' was supposed to be issued other than me, the owner of 'scotthelme.co.uk'?

Do you have any info on the malicious CT logs? I'd be interested to read something on that!


Replies

jasomill • yesterday at 8:41 PM

Possibly CT logs revealing information about domain name and IP address spaces, or other information through implementation details, that might not otherwise be public.

londons_explore • yesterday at 8:57 PM

CT logs stapling proof, but then never actually including that cert in the log.

➕ show 1 reply