SecurityEngineering/Certificate Transparency: Difference between revisions

Mozilla does not maintain a separate log application process. We recognize CT logs that appear in the Chromium log_list.json list, located at https://googlechrome.github.io/CertificateTransparency/log_lists.html. CT logs included in that list that are marked 'qualified', 'usable', 'readonly', or 'retired' are considered usable by Mozilla as described above. Log operators seeking inclusion or updates to their logs should apply through Google’s CT log program. Mozilla expects all operators of Admissible CT logs to include all Root Certificates in NSS that have the websites trust bit enabled. Mozilla also expects that all log operators will maintain reliable availability, timely merging of submitted certificates, and ongoing compliance with all relevant CT operational requirements. Mozilla reserves the right to independently assess or disqualify any log to protect its users.