Unverified50% confidenceFactExact time
Certificate Transparency (CT) logs require CAs to publish every certificate they issue, so if attackers issue certificates, in theory a public record will be left behind.
1
Sources
50%
Confidence
Long-term
Relevance
10/20/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedCertificate pinning can defend against man-in-the-middle attacks: even if an attacker holds a valid certificate issued by a trusted CA, the connection is still rejected as long as the public key hash does not match the pinned value.72% similarUnverifiedCT 框架的核心思想是所有 TLS 证书在签发时必须记录到公开的、只允许追加的密码学日志中，任何人均可验证70% similarUnverifiedThe security of the CA trust system depends on its weakest CA — if any CA is compromised or has validation flaws, it may result in legitimate certificates being issued for domains not owned by the requester.69% similarUnverifiedCertificate Transparency logs, internet scanning projects (such as Censys and Rapid7's historical datasets), and security research community archives make historical certificates searchable.68% similarVerifiedSSL/TLS certificates establish secure channels through asymmetric encryption technology and are issued by trusted CAs (Certificate Authorities).66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1076810API
curl https://kongchang.com/api/v1/knowledge/claims/1076810MCP
get_claim(id=1076810)