<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">I've finally taken the time to explain via diagrams and many words how undetected MITM attacks can happen with Certificate Transparency.<div><div><br></div><div>As this topic has been brought up on this list a few times, and I've received requests from some to elaborate in detail, I thought I'd share it here. This post is also a direct response to Ben Laurie's recently published ACM article [1].</div><div><br></div><div>Many thanks go to Zaki (@zmanian), Simon (@simondlr) and others to reviewing it prior to publication:</div><div><br></div><div><a href="http://blog.okturtles.com/2014/09/the-trouble-with-certificate-transparency/">http://blog.okturtles.com/2014/09/the-trouble-with-certificate-transparency/</a></div><div><br></div><div><div>Kind regards,</div><div>Greg</div></div><div><br></div><div>[1] <a href="http://queue.acm.org/detail.cfm?id=2668154">http://queue.acm.org/detail.cfm?id=2668154</a></div><div><br></div><div><div apple-content-edited="true"><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none;">--</span><br style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none;">Please do not email me anything that you are not comfortable also sharing</span><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none;"> with the NSA.</span>
</div>
<br></div></div></body></html>