Skip to content

Commit 9d5b89b

Browse files
author
ID Bot
committed
Script updating gh-pages from ffa4e86. [ci skip]
1 parent 80286c3 commit 9d5b89b

2 files changed

Lines changed: 4 additions & 3 deletions

File tree

overview-diagrams/draft-davidben-tls-merkle-tree-certs.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1734,7 +1734,7 @@ <h2 id="name-overview">
17341734
</li>
17351735
</ol>
17361736
<p id="section-3-5">A certificate with cosignatures is known as a <em>full certificate</em>. Analogous to X.509 trust anchors and trusted CT logs, relying parties are configured with trusted cosigners (<a href="#trusted-cosigners" class="auto internal xref">Section 7.3</a>) that allow them to accept Merkle Tree certificates. The inclusion proof proves the TBSCertificate is part of some subtree, and cosignatures from trusted cosigners prove the subtree was certified by the CA and available to monitors. Where CT logs entire certificates, the issuance log's entries are smaller TBSCertificateLogEntry (<a href="#log-entries" class="auto internal xref">Section 5.3</a>) structures, which do not scale with public key or signature size.<a href="#section-3-5" class="pilcrow"></a></p>
1737-
<p id="section-3-6">This same issuance process also produces a <em>signatureless certificate</em>. This is an optional, optimized certificate that avoids cosignatures. Signatureless certificates are available after a short period of time and usable with up-to-date relying parties.<a href="#section-3-6" class="pilcrow"></a></p>
1737+
<p id="section-3-6">This same issuance process also produces a <em>signatureless certificate</em>. This is an optional, optimized certificate that avoids all cosignatures, including the CA signature. Signatureless certificates are available after a short period of time and usable with up-to-date relying parties.<a href="#section-3-6" class="pilcrow"></a></p>
17381738
<span id="name-a-diagram-of-signatureless-"></span><div id="fig-signatureless-overview">
17391739
<figure id="figure-2">
17401740
<div id="section-3-7.1">

overview-diagrams/draft-davidben-tls-merkle-tree-certs.txt

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -399,8 +399,9 @@ Table of Contents
399399

400400
This same issuance process also produces a _signatureless
401401
certificate_. This is an optional, optimized certificate that avoids
402-
cosignatures. Signatureless certificates are available after a short
403-
period of time and usable with up-to-date relying parties.
402+
all cosignatures, including the CA signature. Signatureless
403+
certificates are available after a short period of time and usable
404+
with up-to-date relying parties.
404405

405406
+-- Certificate Authority -------+
406407
| | +-- Update Channel --+

0 commit comments

Comments
 (0)