Hacker News new | ask | show | jobs
by reddiric 3429 days ago
That's a different issue, and doesn't address what I wrote.
2 comments

Actually it does address your point about trust; CT severely limits the amount of trust we need to place to any single participating CA, including now Google.
I think it's related? Since certificate transparency is a way of watching what's going on with all certificate providers (or at least the ones that use it), an organization that thinks Google's root is up to no good has a way of checking.

It's after the fact, to be sure, but it matters for reputation.

Google has announced an effort to move all CAs to Certificate Transparency, here is a Threatpost piece on the topic - https://threatpost.com/google-to-make-certificate-transparen....

They will already log their public certificates to CT and this will continue given their push for CT.