[New Post] MIT 6.824: Lecture 18 - Certificate Transparency
Hi there,
Thank you for subscribing to receive a notification when I publish something new.
This email is a preview of my most recent post — which is on Certificate Transparency — and a link to the full post.
Thank you,
Timi
This lecture is about building systems out of mutually untrustworthy components — using the Web as a case study. The systems we have seen so far are closed systems for which we have assumed that all the participants are trustworthy. But in an open system like the Web where anyone can take part, and there is no universally trusted authority, trust and security are top-level issues to address.
A fundamental challenge in building open systems is verifying the identity of each component involved. We can frame that challenge as each computer in the system asking: Am I talking to the right computer?
Certificate Transparency (CT) aims to help answer this question, but before going into CT, I'll give a brief tour of the evolution of security on the Web.