Timeline for How does Certificate Transparance detect fake or forked logs?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 30, 2015 at 14:58 | comment | added | JimmyJames | Thje question specifically asks "Can the browser tell if a log is legitimate?" so I'm confused by this response. The whole point of this is to allow clients (e.g. browsers) to detect bad certs. The documentation you reference specifically says anyone can create a log. It's just like CAs. Anyone can set one up. Ultimately is about which ones you trust. | |
| Oct 30, 2015 at 9:30 | comment | added | Tor Klingberg | The auditor is part of the browser, so I don't care about communication between the browser and the auditor. How will the monitors find out about "fake" logs? | |
| Oct 29, 2015 at 15:45 | history | answered | JimmyJames | CC BY-SA 3.0 |