On Oct 29, 2012, at 12:19 PM, Ben Laurie <[email protected]> wrote: > On 29 October 2012 19:18, Paul Hoffman <[email protected]> wrote: >> On Oct 26, 2012, at 9:16 AM, Stephen Farrell <[email protected]> >> wrote: >> >>> Assuming for the moment that we do go ahead and >>> standardise CT, how many documents (RFCs) ought be >>> used to document that? >> >> 1. It needs to be written so that both CAs and browser vendors can read it, >> but that's the only requirement. Extra points for a generally-readable >> summary and maybe an appendix for the layperson, but the definition of the >> scheme can live in a single document. > > Actually, there are monitors, too.
Yes, but if I am going to trust a monitor, they had better damn well at least as technically capable as the CAs and the browsers. My personal hope is for a small number of obviously-trusted monitors, not a thousand flowers blooming. --Paul Hoffman _______________________________________________ therightkey mailing list [email protected] https://www.ietf.org/mailman/listinfo/therightkey
