When people speak about CT that usually means only TLS certificates are stored in log. However, CT probable might be considered for usage in other PKI-based technologies.

  • Is CT designed to log S/MIME certificates?
  • Does any benefits or restrictions exist to populate CT logs with S/MIME certificates?
  • 1
    Not sure. Digicert says in a 2017 blog that you can't log S/MIME certs. But I don't see why not. And there was a talk at Real World Crypto 2018 about the idea of generalizing the CT concept to just about anything: the "Trillian" project. So I don't think there's a technical reason for not allowing S/MIME certs. I also found a GitHub project that seems to be about doing just that: "email2certs". Commented Feb 5, 2018 at 14:14
  • @StackzOfZtuff, yes, I also saw that. I am interested in a reasoning behind that. One possible limitation is that e-mail addresses contained in S/MIME certs might be exposed in a central repository.
    – tysonite
    Commented Feb 5, 2018 at 14:31
  • Yeah. Seems like a reasonable assumption. Commented Feb 7, 2018 at 20:40


You must log in to answer this question.