Comment by Scott_Helme_
7 hours ago
I agree this is a burden placed on domain owners, but who else can know if a certificate for my domain 'scotthelme.co.uk' was supposed to be issued other than me, the owner of 'scotthelme.co.uk'?
Do you have any info on the malicious CT logs? I'd be interested to read something on that!
Possibly CT logs revealing information about domain name and IP address spaces, or other information through implementation details, that might not otherwise be public.
CT logs stapling proof, but then never actually including that cert in the log.
But that's detectable and what we have MMD for, a log operator that does this can be found out.