On Wed, Oct 19, 2016 at 02:33:30PM -0500, Tom Ritter wrote: > Actions for an auditor to take is a good thing to try and document > somewhere. We _could_ put it into Gossip, but it seems like a separate > draft to me. Off the top of my head I think the main things it would > be checking are: > - Has the log always issued a STH within the MMD
I didn't look up what the real definition of the MMD is, but what I expect is that the time from the SCT being generated until that STH being visible is important, not the time the STH is generated. For instance I only see Digicert's STHs 12 hour later. With Google it depends on the log, for Pilot and Aviator it averages around 25 minutes, for Rocketeer around 100 minutes. > - Can I resolve all inputs (SCTs, STHs) into a single STH via > inclusion/consistency proofs (to prevent split views) Which is why I started to collect all that I can see myself. But I'm not sure yet if this proposal will let me find all of them, or at least all that have been send to someone. Kurt _______________________________________________ Trans mailing list [email protected] https://www.ietf.org/mailman/listinfo/trans
