2

When people speak about CT that usually means only TLS certificates are stored in log. However, CT probable might be considered for usage in other PKI-based technologies.

  • Is CT designed to log S/MIME certificates?
  • Does any benefits or restrictions exist to populate CT logs with S/MIME certificates?
Improve this question
3
  • 1
    Not sure. Digicert says in a 2017 blog that you can't log S/MIME certs. But I don't see why not. And there was a talk at Real World Crypto 2018 about the idea of generalizing the CT concept to just about anything: the "Trillian" project. So I don't think there's a technical reason for not allowing S/MIME certs. I also found a GitHub project that seems to be about doing just that: "email2certs". – StackzOfZtuff Feb 5 '18 at 14:14
  • @StackzOfZtuff, yes, I also saw that. I am interested in a reasoning behind that. One possible limitation is that e-mail addresses contained in S/MIME certs might be exposed in a central repository. – tysonite Feb 5 '18 at 14:31
  • Yeah. Seems like a reasonable assumption. – StackzOfZtuff Feb 7 '18 at 20:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.