Google CT vs Microsoft Certificate Reputation - Which Is Better & Why?

[aa_kira]

Is Microsoft's Certificate Reputation intended to be its answer/equivalent capability to Certificate Transparency?  Does anyone know whether MS had planned to or perhaps may plan to implement Transparency in addition to Reputation?

With more PKIs-CAs moving toward Transparency (albeit at a slow pace), one would think MS - as a member of the CAB Forum - might want to join the party.

[Eran Messeri]

You'll have to ask Microsoft about Certificate Reputation, but going by their blog post (https://blogs.msdn.microsoft.com/ie/2014/03/10/certificate-reputation-a-novel-approach-for-protecting-users-from-fraudulent-certificates/) on it, the main difference seems to be that CT is open to everyone while Certificate Reputation is managed by Microsoft who decides when to contact domain owners.

On Tue, Aug 2, 2016 at 4:44 PM, aa_kira <ak...@mitre.org> wrote:

Is Microsoft's Certificate Reputation intended to be its answer/equivalent capability to Certificate Transparency?  Does anyone know whether MS had planned to or perhaps may plan to implement Transparency in addition to Reputation?

With more PKIs-CAs moving toward Transparency (albeit at a slow pace), one would think MS - as a member of the CAB Forum - might want to join the party.

--
You received this message because you are subscribed to the Google Groups "certificate-transparency" group.
To unsubscribe from this group and stop receiving emails from it, send an email to certificate-transp...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.