I agree this is a burden placed on domain owners, but who else can know if a certificate for my domain 'scotthelme.co.uk' was supposed to be issued other than me, the owner of 'scotthelme.co.uk'?
replyDo you have any info on the malicious CT logs? I'd be interested to read something on that!
Possibly CT logs revealing information about domain name and IP address spaces, or other information through implementation details, that might not otherwise be public.
replyCT logs stapling proof, but then never actually including that cert in the log.
replyBut that's detectable and what we have MMD for, a log operator that does this can be found out.
reply