Skip to content

Commit 9cae733

Browse files
author
ID Bot
committed
Script updating gh-pages from bf582f8. [ci skip]
1 parent 5f9b2d6 commit 9cae733

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

log-number-security-considerations/draft-ietf-plants-merkle-tree-certs.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5288,7 +5288,7 @@ <h4 id="name-limiting-issuance-logs">
52885288
<a href="#section-12.2.2" class="section-number selfRef">12.2.2. </a><a href="#name-limiting-issuance-logs" class="section-name selfRef">Limiting Issuance Logs</a>
52895289
</h4>
52905290
<p id="section-12.2.2-1">While multiple issuance logs help mitigate log failures, as described above, they introduce transparency risks. If a CA violates the requirement to only use one issuance log at a time, it might add an entry in some far future log number. To be accepted in transparency-enforcing relying parties, the log state must still be cosigned. However, monitors may not know which log numbers to monitor.<a href="#section-12.2.2-1" class="pilcrow">¶</a></p>
5291-
<p id="section-12.2.2-2">PKIs with transparency requirements SHOULD mitigate this by only accepting a limited range of log numbers in relying parties, transparency cosigners, or both. This limit MAY be set to a fixed value or a rolling value that is updated whenever the CA switches its current log. Fixed values require committing to a limit of recoverable log failures during the lifetime of a CA.<a href="#section-12.2.2-2" class="pilcrow">¶</a></p>
5291+
<p id="section-12.2.2-2">PKIs with transparency requirements SHOULD mitigate this by only accepting a limited range of log numbers in relying parties, transparency cosigners, or both. This limit MAY be set to a fixed value or a rolling value that is updated whenever the CA switches its current log. Fixed values require committing to a limit of recoverable log failures over the lifetime of a CA.<a href="#section-12.2.2-2" class="pilcrow">¶</a></p>
52925292
<p id="section-12.2.2-3">Log number limits in relying parties can be implemented by revoking all serial numbers above some threshold. (See <a href="#revoked-ranges" class="auto internal xref">Section 7.5</a>.)<a href="#section-12.2.2-3" class="pilcrow">¶</a></p>
52935293
</section>
52945294
</div>

log-number-security-considerations/draft-ietf-plants-merkle-tree-certs.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3077,7 +3077,7 @@ Table of Contents
30773077
transparency cosigners, or both. This limit MAY be set to a fixed
30783078
value or a rolling value that is updated whenever the CA switches its
30793079
current log. Fixed values require committing to a limit of
3080-
recoverable log failures during the lifetime of a CA.
3080+
recoverable log failures over the lifetime of a CA.
30813081

30823082
Log number limits in relying parties can be implemented by revoking
30833083
all serial numbers above some threshold. (See Section 7.5.)

0 commit comments

Comments
 (0)