Update to Chrome's CT Log Policy

[Joe DeBlasio]

Hi folks,

Today, we published a small update to our CT log policy, which covers the Chrome CT team's expectations of CT logs and log operators included in Chrome's CT log list.

The update offers some insight in how the Chrome CT team assesses the severity of, and is likely to respond to, log incidents. It also clarifies how we expect log operators to detect and respond to incidents.

We encourage existing log operators to reread the policy -- the changes primarily impact the "Incident Detection and Response" and "Chrome’s Response to Incidents and Policy Violations" sections. This policy takes effect immediately, but enforcement will only be forward-looking.

If you have any questions, please let us know,

Joe, on behalf of the Chrome CT team