Hacker News new | ask | show | jobs
by SysArchitect 3539 days ago
What does it take to build a Certificate Transparency log? Is this something that we could allow someone like the EFF/Let's Encrypt run?
1 comments

Google open sourced their server implementation[1]. The problem that a number of CAs and other log operators have run into is that Google has rather strict requirements[2] for uptime and such (which makes sense!) if SCTs from that log server are to be accepted by Chrome, so you'd probably need a dedicated team capable of operating a HA cluster.

[1]: https://github.com/google/certificate-transparency

[2]: https://www.chromium.org/Home/chromium-security/certificate-...