Comments (1)
This is indeed the case. While bad faith or malice are very difficult to prove in practice, there are certain scenarios that call the trust in a given Log or Log Operator into question, regardless of date of detection. Such scenarios include but are not limited to:
- Private key compromise of a Log
- Certain non-trivial split-view scenarios
- Egregious or seemingly intentional failure to log certificates or pre-certs for which SCTs exist
From my perspective, there are three sensible states for a Log at the simplest level possible:
- Currently Qualified
- Frozen (at a specific STH / date)
- Disqualified
All Logs would trivially start as Disqualified, wherein no SCTs from these Logs count towards certificate qualification. Applying and being accepted into the trusted Log list brings a Log to the Currently Qualified state. Under normal lifecycle conditions, that is the Log undergoes no incident that results in policy violation, the Log will eventually cease operations and become Frozen. Being Frozen means all SCTs issued before a specific STH / date can count towards certificate qualification, but no SCT after this point will count.
Should a policy-violating incident arise, the result can be a premature Freezing of a Log for issues such as significant uptime violations or a blown MMD. For more severe situations that call into question the integrity of SCTs or the Merkle Tree itself, this Log should no longer be treated as if it has been operated in good faith (Disqualification). It's worth noting that both Disqualification and Freezing depend on client side updates to take up these changes in order to take effect.
While there isn't currently any published guidance on which type of response will be deployed in which scenario, one of the outcomes from the Nov 2017 CT Policy Days was to create better Log Incident Response documentation, which would substantively cover this concern. Look for conversation in the ct-policy group to cover this issue in the near future.
from certificatetransparency.
Related Issues (20)
- Limit the certificate signature algorithms that logs are permitted to accept
- Update or remove introduction to CT Policy
- Update CT Policy to reflect requirement for CT for all certs issued after 2018. HOT 4
- Log URLs listed in Qualified URLs don't work HOT 1
- List mirrors
- Define accepted log public keys HOT 2
- Update README.MD to replace "Chromium" with "Chrome" as appropriate
- List the Log Inclusion Request in the informative table
- [email protected]
- Determine whether there is a minimal set of certificates a Log must accept HOT 1
- [email protected]
- Specify a minimum submission size that logs are required to support
- Update ct log list references to v3
- Clarify what policies a Log is allowed to accept/reject a certificate
- Copy-pasted transition info for `Retired` CT log state
- Additional policy questions for Logs
- Certificate Transparency Log Certificate Acceptance Proposal HOT 1
- Recommend that Certificate Transparency Logs reject expired certificates
- Require SCTs for Intermediate Certificates
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from certificatetransparency.