xxx-draft-spec-for-TLS-normalization.txt

[Chris Palmer]

On Feb 2, 2011, at 9:18 AM, Jacob Appelbaum wrote:

> That's likely because some CAs but not all CAs will insert random data
> into the serial number field as a method of injecting entropy into
> issued certificates. Can you dump the CA names with those?

No, almost all the valid_certs are like this, so it would be a huge list. Also, even if the CA just hashes a timestamp, it will "look" random in my query results.


-- 
Chris Palmer
Technology Director, Electronic Frontier Foundation