Retrieved SCT signature should be verified
Open
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
Currently signatures on SCTs that are returned from CT logs to be included in certificates aren't verified using the logs public keys.
Contributor guide
Assessment
This issue has not been assessed yet.