Hacker News new | ask | show | jobs
by kroeckx 1828 days ago
The article you point to does not mention anything about certificate transparency. They do not only depend on their own CT log to issue certificates, but also on CT logs run by external parties to issue a certificate.

Google's current policy still seems to require them to use 1 Google log, and 1 other non-Google log given the lifetime. They seem to use 1 Google log, and 1 other random log, including their own.

I'm doubt the logs will be able to keep up.