Re: [Trans] Threat model outline, attack model

[Ralph Holz <[e-mail]>]

Hi Gervase,

I agree; I was trying to give an upper bound.

I think the original CT design documents spoke about "maybe 30 logs, but
certainly a lot less than 1000" or so.

Ralph

On 09/29/2014 03:23 PM, Gervase Markham wrote:
> On 28/09/14 13:17, Ralph Holz wrote:
>> * That leaves us with an undisclosed number of intermediate
>> certificates issued by CAs.
> 
> And why would any of those want to run a log anyway, more than a
> random person? I'd expect them in most cases to submit their certs to
> the log run by the parent CA.
> 
> I wonder also if small CAs would pool resources to run a log. After
> all, it's not a customer-facing function.
> 
> So I'd be surprised if we see 60 logs.
> 
> Gerv
> 
> _______________________________________________ Trans mailing list 
> [e-mail] https://www.ietf.org/mailman/listinfo/trans
> 


-- 
Ralph Holz
I8 - Network Architectures and Services
Technische Universität München
http://www.net.in.tum.de/de/mitarbeiter/holz/
Phone [phone]
PGP: A805 D19C E23E 6BBB E0C4  86DC 520E 0C83 69B0 03EF