On Sat, Sep 27, 2014 at 09:58:56AM -0700, Tao Effect wrote: > "No barrier"? Subjects (domain owners) would need to monitor *all* the logs > out there. > > There will be like 1000+ logs out there.
"Citation needed", as the Wikipedeans say. I'm not sure how you could possibly come to that conclusion. Even if there were that many logs in existence, the number of logs that a subject would have to monitor would be limited to the set of logs that are trusted by browsers and other SSL-using clients who implement CT (because one or more of those logs are going to *have* to receive the certificate in order for the log entry to be of any use). While the requirements for running a log that is eligible for inclusion in Chromium aren't *hugely* arduous, they're still not so trivial that every man and his dog is going to be doing it. In fact, given that there's no way to monetize running a log, there are strong *dis*incentives to doing so "just for the hell of it". - Matt _______________________________________________ Trans mailing list [email protected] https://www.ietf.org/mailman/listinfo/trans
