Comments (2)
We also need to check what key algs our compliance monitoring infrastructure supports to provide the minimal set of supportable key types.
from certificatetransparency.
Also, of note is Section 2.1.4 of RFC 6962 which states:
Various data structures are signed. A log MUST use either elliptic
curve signatures using the NIST P-256 curve (Section D.1.2.3 of the
Digital Signature Standard [DSS]) or RSA signatures (RSASSA-PKCS1-
V1_5 with SHA-256, Section 8.2 of [RFC3447]) using a key of at least
2048 bits.
from certificatetransparency.
Related Issues (20)
- Retrospective log disqualification scenarios HOT 1
- Limit the certificate signature algorithms that logs are permitted to accept
- Update or remove introduction to CT Policy
- Update CT Policy to reflect requirement for CT for all certs issued after 2018. HOT 4
- Log URLs listed in Qualified URLs don't work HOT 1
- List mirrors
- Update README.MD to replace "Chromium" with "Chrome" as appropriate
- List the Log Inclusion Request in the informative table
- [email protected]
- Determine whether there is a minimal set of certificates a Log must accept HOT 1
- [email protected]
- Specify a minimum submission size that logs are required to support
- Update ct log list references to v3
- Clarify what policies a Log is allowed to accept/reject a certificate
- Copy-pasted transition info for `Retired` CT log state
- Additional policy questions for Logs
- Certificate Transparency Log Certificate Acceptance Proposal HOT 1
- Recommend that Certificate Transparency Logs reject expired certificates
- Require SCTs for Intermediate Certificates
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from certificatetransparency.