Dear all,

Suppose I can consistently redirect a client C to a masquerading
server M. The proposed gossip mechanism will not detect this, as SCTs
are only ever sent back to the server they are received from. This
should be fixed by having clients gossip constantly about STHs, thus
ensuring that if any honest server is contacted, the MITM is detected.

Sincerely,
Watson Ladd

_______________________________________________
Trans mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/trans

Reply via email to