Hacker News Reader

Don’t you have to trust the CA to actually log all the certs they issue? What’s to stop a rogue CA from logging all but a few key certs?

Anyone else can log a cert too. There was talk of Chromium logging any cert that chains to a public root that they find un-logged.