<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>Dear elijah,</div><div><br></div>On Oct 3, 2014, at 11:43 AM, elijah <<a href="mailto:elijah@riseup.net">elijah@riseup.net</a>> wrote:<div><blockquote type="cite">In the auditing-infrastructure thing, the hope is that user agents will<br>be written to smartly and automatically perform the auditing. Yes, it is<br>detection after the fact. The prediction is that the number of people<br>running an auditing user agent will be greater than the number of<br>senders doing fingerprint verification, and that this greater number<br>will provider greater deterrent against bogus key endorsements.<br></blockquote><div><br></div>In the CT world, auditing and monitoring are two very different things, and they must not be confused.</div><div><br></div><div>Auditing does not detect mis-issued certificates/keys/whatever before the fact, during the fact, or after the fact [1].</div><div><br></div><div>Kind regards,</div><div>Greg Slepak</div><div><br></div><div>[1] <a href="https://blog.okturtles.com/2014/09/the-trouble-with-certificate-transparency/">https://blog.okturtles.com/2014/09/the-trouble-with-certificate-transparency/</a></div><div><div> <br class="Apple-interchange-newline"><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none;">--</span><br style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none;">Please do not email me anything that you are not comfortable also sharing</span><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none;"> with the NSA.</span> </div> <br><div><div><br></div></div></div></body></html>