Skip to content

Commit

Permalink
Update Recognized Logs Tables (#20)
Browse files Browse the repository at this point in the history
* Tweak table format to be more readable in browser
* Update tables to reflect recent Log State changes
* Change CT-enforcement language to reflect April 30, 2018 enforcement date
  • Loading branch information
@devonobrien
devonobrien committed Jul 18, 2019
1 parent c6697f9 commit d75481c
Showing 1 changed file with 50 additions and 41 deletions.
91 changes: 50 additions & 41 deletions README.md
View file
Expand Up @@ -14,11 +14,7 @@ support Certificate Transparency. This allows users, the Chromium Authors, and
the public to verifiably audit that CAs are conforming to the policies set out
in Chromium's [Root Certificate Policy](https://www.chromium.org/Home/chromium-security/root-ca-policy).

Currently, Chromium does not enforce that all Root CAs support Certificate
Transparency for all certificates. However, it is required for the certificates
issued by some CAs, and in order to have a certificate recognized as an Extended
Validation certificate, that such certificates **MUST** be CT Qualified. For
more details, see the [Certificate Transparency in Chrome Policy](ct_policy.md).
Chromium requires all publicly-trusted TLS certificates issued after April 30, 2018 to support CT as described in the [Certificate Transparency in Chrome Policy](ct_policy.md). Extended Validation (EV) TLS certificates issued before this date are also required to support CT in order to be recognized as an EV certificate in Chromium.

## For Log Operators

Expand All @@ -38,45 +34,58 @@ certificates or inspecting the certificates that have been logged.

### Qualified Logs

| Log Operator | Name | Log URL | Maximum Merge Delay | Included Since |
| ------------ | ---- | ------- | ------------------- | -------------- |
|[Google](https://www.google.com)|Google 'Pilot' Log|https://ct.googleapis.com/pilot|24 hours|*Revision:* https://crrev.com/237785 <br/> Chrome: 35|
|[Google](https://www.google.com)|Google 'Aviator' Log|https://ct.googleapis.com/aviator|24 hours|*Revision:* https://crrev.com/237785 <br/> Chrome: 35 <br/> Note: Frozen (not accepting new certificates)|
|[DigiCert](https://www.digicert.com)|DigiCert's Certificate Transparency log|https://ct1.digicert-ct.com/log/|24 hours|*Revision:* https://crrev.com/309831 <br/> Chrome: 41|
|[Google](https://www.google.com)|Google 'Rocketeer' Log|https://ct.googleapis.com/rocketeer|24 hours|*Revision:* https://crrev.com/325382 <br/> Chrome: 43|
|[DigiCert](https://www.digicert.com)|Symantec Log|https://ct.ws.symantec.com|24 hours|*Revision:* https://crrev.com/483625 <br/> Chrome: 45|
|[DigiCert](https://www.digicert.com)|Symantec 'Vega' Log|https://vega.ws.symantec.com/|24 hours|*Revision:* https://crrev.com/376143 <br/> Chrome: 50|
|[Google](https://www.google.com)|Google 'Skydiver' Log|https://ct.googleapis.com/skydiver/|24 hours|*Revision:* https://crrev.com/429670 <br/> Chrome: 55|
|[Google](https://www.google.com)|Google 'Icarus' Log|https://ct.googleapis.com/icarus/|24 hours|*Revision:* https://crrev.com/429670 <br/> Chrome: 55|
|[Venafi](https://www.venafi.com)|Venafi Gen2 CT log|https://ctlog-gen2.api.venafi.com/|24 hours|*Revision:* https://crrev.com/471318 <br/> Chrome: 59|
|[Comodo](https://www.comodo.com)|Comodo 'Sabre' Log|https://sabre.ct.comodo.com/|24 hours|*Revision:* https://crrev.com/482145 <br/> Chrome: 60|
|[Comodo](https://www.comodo.com)|Comodo 'Mammoth' Log|https://mammoth.ct.comodo.com/|24 hours|*Revision:* https://crrev.com/482145 <br/> Chrome: 60|
|[DigiCert](https://www.digicert.com)|DigiCert Log Server 2|https://ct2.digicert-ct.com/log/|24 hours|*Revision:* https://crrev.com/481160 <br/> Chrome: 60|
|[DigiCert](https://www.digicert.com)|Symantec 'Sirius' Log|https://sirius.ws.symantec.com/|24 hours|*Revision:* https://crrev.com/481160 <br/> Chrome: 60|
|[Google](https://www.google.com)|Google 'Argon2018' Log|https://ct.googleapis.com/logs/argon2018/|24 hours|*Revision:* https://crrev.com/540254 <br/> Chrome: 65|
|[Google](https://www.google.com)|Google 'Argon2019' Log|https://ct.googleapis.com/logs/argon2019/|24 hours|*Revision:* https://crrev.com/540254 <br/> Chrome: 65|
|[Google](https://www.google.com)|Google 'Argon2020' Log|https://ct.googleapis.com/logs/argon2020/|24 hours|*Revision:* https://crrev.com/540254 <br/> Chrome: 65|
|[Google](https://www.google.com)|Google 'Argon2021' Log|https://ct.googleapis.com/logs/argon2021/|24 hours|*Revision:* https://crrev.com/540254 <br/> Chrome: 65|
|[Cloudflare](https://www.cloudflare.com)|Cloudflare 'Nimbus2018' Log|https://ct.cloudflare.com/logs/nimbus2018/|24 hours|*Revision:* https://crrev.com/540254 <br/> Chrome: 65|
|[Cloudflare](https://www.cloudflare.com)|Cloudflare 'Nimbus2019' Log|https://ct.cloudflare.com/logs/nimbus2019/|24 hours|*Revision:* https://crrev.com/540254 <br/> Chrome: 65|
|[Cloudflare](https://www.cloudflare.com)|Cloudflare 'Nimbus2020' Log|https://ct.cloudflare.com/logs/nimbus2020/|24 hours|*Revision:* https://crrev.com/540254 <br/> Chrome: 65|
|[Cloudflare](https://www.cloudflare.com)|Cloudflare 'Nimbus2021' Log|https://ct.cloudflare.com/logs/nimbus2021/|24 hours|*Revision:* https://crrev.com/540254 <br/> Chrome: 65|
|[DigiCert](https://www.digicert.com)|DigiCert 'Yeti2018' Log|https://yeti2018.ct.digicert.com/log/|24 hours|*Revision:* https://crrev.com/559734 <br/> Chrome: 67|
|[DigiCert](https://www.digicert.com)|DigiCert 'Yeti2019' Log|https://yeti2019.ct.digicert.com/log/|24 hours|*Revision:* https://crrev.com/559734 <br/> Chrome: 67|
|[DigiCert](https://www.digicert.com)|DigiCert 'Yeti2020' Log|https://yeti2020.ct.digicert.com/log/|24 hours|*Revision:* https://crrev.com/559734 <br/> Chrome: 67|
|[DigiCert](https://www.digicert.com)|DigiCert 'Yeti2021' Log|https://yeti2021.ct.digicert.com/log/|24 hours|*Revision:* https://crrev.com/559734 <br/> Chrome: 67|
|[DigiCert](https://www.digicert.com)|DigiCert 'Yeti2022' Log|https://yeti2022.ct.digicert.com/log/|24 hours|*Revision:* https://crrev.com/559734 <br/> Chrome: 67|
| Log Operator | Log Name | Log URL | MMD | Qualified In | Current State |
|-------------------------------------------|-----------------------------------------|--------------------------------------------|----------|---------------------------------------|---------------|
| [Google](https://www.google.com/) | Google 'Aviator' Log | https://ct.googleapis.com/aviator | 24 hours | [Chrome 35](https://crrev.com/237785) | Read Only |
| [Google](https://www.google.com/) | Google 'Pilot' Log | https://ct.googleapis.com/pilot/ | 24 hours | [Chrome 35](https://crrev.com/237785) | Usable |
| [DigiCert](https://www.digicert.com/) | DigiCert's Certificate Transparency log | https://ct1.digicert-ct.com/log/ | 24 hours | [Chrome 41](https://crrev.com/309831) | Usable |
| [Google](https://www.google.com/) | Google 'Rocketeer' Log | https://ct.googleapis.com/rocketeer | 24 hours | [Chrome 43](https://crrev.com/325382) | Usable |
| [Google](https://www.google.com/) | Google 'Icarus' Log | https://ct.googleapis.com/icarus/ | 24 hours | [Chrome 55](https://crrev.com/429670) | Usable |
| [Google](https://www.google.com/) | Google 'Skydiver' Log | https://ct.googleapis.com/skydiver/ | 24 hours | [Chrome 55](https://crrev.com/429670) | Usable |
| [Venafi](https://www.venafi.com/) | Venafi Gen2 CT log | https://ctlog-gen2.api.venafi.com/ | 24 hours | [Chrome 59](https://crrev.com/471318) | Read Only |
| [DigiCert](https://www.digicert.com/) | DigiCert Log Server 2 | https://ct2.digicert-ct.com/log/ | 24 hours | [Chrome 60](https://crrev.com/481160) | Usable |
| [Sectigo](https://sectigo.com/) | Sectigo 'Mammoth' Log | https://mammoth.ct.comodo.com/ | 24 hours | [Chrome 60](https://crrev.com/482145) | Usable |
| [Sectigo](https://sectigo.com/) | Sectigo 'Sabre' Log | https://sabre.ct.comodo.com/ | 24 hours | [Chrome 60](https://crrev.com/482145) | Usable |
| [Cloudflare](https://www.cloudflare.com/) | Cloudflare 'Nimbus2019' Log | https://ct.cloudflare.com/logs/nimbus2019/ | 24 hours | [Chrome 65](https://crrev.com/540254) | Usable |
| [Cloudflare](https://www.cloudflare.com/) | Cloudflare 'Nimbus2020' Log | https://ct.cloudflare.com/logs/nimbus2020/ | 24 hours | [Chrome 65](https://crrev.com/540254) | Usable |
| [Cloudflare](https://www.cloudflare.com/) | Cloudflare 'Nimbus2021' Log | https://ct.cloudflare.com/logs/nimbus2021/ | 24 hours | [Chrome 65](https://crrev.com/540254) | Usable |
| [Google](https://www.google.com/) | Google 'Argon2019' Log | https://ct.googleapis.com/logs/argon2019/ | 24 hours | [Chrome 65](https://crrev.com/540254) | Usable |
| [Google](https://www.google.com/) | Google 'Argon2020' Log | https://ct.googleapis.com/logs/argon2020/ | 24 hours | [Chrome 65](https://crrev.com/540254) | Usable |
| [Google](https://www.google.com/) | Google 'Argon2021' Log | https://ct.googleapis.com/logs/argon2021/ | 24 hours | [Chrome 65](https://crrev.com/540254) | Usable |
| [DigiCert](https://www.digicert.com/) | DigiCert 'Yeti2019' Log | https://yeti2019.ct.digicert.com/log/ | 24 hours | [Chrome 67](https://crrev.com/559734) | Usable |
| [DigiCert](https://www.digicert.com/) | DigiCert 'Yeti2020' Log | https://yeti2020.ct.digicert.com/log/ | 24 hours | [Chrome 67](https://crrev.com/559734) | Usable |
| [DigiCert](https://www.digicert.com/) | DigiCert 'Yeti2021' Log | https://yeti2021.ct.digicert.com/log/ | 24 hours | [Chrome 67](https://crrev.com/559734) | Usable |
| [DigiCert](https://www.digicert.com/) | DigiCert 'Yeti2022' Log | https://yeti2022.ct.digicert.com/log/ | 24 hours | [Chrome 67](https://crrev.com/559734) | Usable |
| [DigiCert](https://www.digicert.com/) | DigiCert 'Nessie2019' Log | https://nessie2019.ct.digicert.com/log/ | 24 hours | [Chrome 72](https://crrev.com/620903) | Usable |
| [DigiCert](https://www.digicert.com/) | DigiCert 'Nessie2020' Log | https://nessie2020.ct.digicert.com/log/ | 24 hours | [Chrome 72](https://crrev.com/620903) | Usable |
| [DigiCert](https://www.digicert.com/) | DigiCert 'Nessie2021' Log | https://nessie2021.ct.digicert.com/log/ | 24 hours | [Chrome 72](https://crrev.com/620903) | Usable |
| [DigiCert](https://www.digicert.com/) | DigiCert 'Nessie2022' Log | https://nessie2022.ct.digicert.com/log/ | 24 hours | [Chrome 72](https://crrev.com/620903) | Usable |
| [Google](https://www.google.com/) | Google 'Xenon2019' Log | https://ct.googleapis.com/logs/xenon2019/ | 24 hours | [Chrome 73](https://crrev.com/634940) | Usable |
| [Google](https://www.google.com/) | Google 'Xenon2020' Log | https://ct.googleapis.com/logs/xenon2020/ | 24 hours | [Chrome 73](https://crrev.com/634940) | Usable |
| [Google](https://www.google.com/) | Google 'Xenon2021' Log | https://ct.googleapis.com/logs/xenon2021/ | 24 hours | [Chrome 73](https://crrev.com/634940) | Usable |
| [Google](https://www.google.com/) | Google 'Xenon2022' Log | https://ct.googleapis.com/logs/xenon2022/ | 24 hours | [Chrome 73](https://crrev.com/634940) | Usable |
| [Cloudflare](https://www.cloudflare.com/) | Cloudflare 'Nimbus2022' Log | https://ct.cloudflare.com/logs/nimbus2022/ | 24 hours | [Chrome 76](https://crrev.com/666475) | Qualified |
| [Cloudflare](https://www.cloudflare.com/) | Cloudflare 'Nimbus2023' Log | https://ct.cloudflare.com/logs/nimbus2023/ | 24 hours | [Chrome 76](https://crrev.com/666475) | Qualified |
| [DigiCert](https://www.digicert.com/) | DigiCert 'Nessie2023' Log | https://nessie2023.ct.digicert.com/log/ | 24 hours | [Chrome 76](https://crrev.com/666475) | Qualified |
| [DigiCert](https://www.digicert.com/) | DigiCert 'Yeti2023' Log | https://yeti2023.ct.digicert.com/log/ | 24 hours | [Chrome 76](https://crrev.com/666475) | Qualified |


### Once, but no longer, Qualified Logs

| Log Operator | Name | Log URL | Maximum Merge Delay | Included Since | Last Accepted SCT |
| ------------ | ---- | ------- | ------------------- | -------------- | ----------------- |
|[Certly](https://certly.io)|Certly.IO Log|https://log.certly.io|24 hours|*Revision:* https://crrev.com/325382 <br/> Chrome: 43 | 15 April 2016 00:00:00 UTC.|
|[Izenpe](https://www.izenpe.com)|Izenpe Log|https://ct.izenpe.com|24 hours|*Revision:* https://crrev.com/326301 <br/> Chrome: 44 | 30 May 2016 00:00:00 UTC.|
|[Venafi](https://www.venafi.com)|Venafi CT Log Server|https://ctlog.api.venafi.com/ct/v1|24 hours|*Revision:* https://crrev.com/349170 <br/> Chrome: 47 | Last Accepted SCT: 28 Feb 2017 18:42:26 UTC.|
|[WoSign](https://www.wosign.com/)|WoSign Log|https://ctlog.wosign.com/|24 hours|*Revision:* https://crrev.com/414378 <br/> Chrome: 54 | 12 Feb 2018 23:59:59 UTC.|
|[StartCom](https://www.startssl.com/)|StartCom CT Log|https://ct.startssl.com/|24 hours|*Revision:* https://crrev.com/414440 <br/> Chrome: 54 | 12 Feb 2018 23:59:59 UTC.|
|[CNNIC](https://cnnic.cn)|CNNIC CT Log|https://ctserver.cnnic.cn/|24 hours|*Revision:* https://crrev.com/396817 <br/> Chrome: 53| 18 Sep 2018 00:00:00 UTC.|
| Log Operator | Name | Log URL | MMD | Qualified In | Last Accepted SCT |
|-------------------------------------------|-----------------------------|--------------------------------------------|----------|---------------------------------------|-----------------------------|
| [Certly](https://certly.io/) | Certly.IO Log | https://log.certly.io | 24 hours | [Chrome 43](https://crrev.com/325382) | 15 April 2016 00:00:00 UTC. |
| [Izenpe](https://www.izenpe.com/) | Izenpe Log | https://ct.izenpe.com | 24 hours | [Chrome 44](https://crrev.com/326301) | 30 May 2016 00:00:00 UTC. |
| [Venafi](https://www.venafi.com/) | Venafi CT Log Server | https://ctlog.api.venafi.com/ct/v1 | 24 hours | [Chrome 47](https://crrev.com/349170) | 28 Feb 2017 18:42:26 UTC. |
| [WoSign](https://www.wosign.com/) | WoSign Log | https://ctlog.wosign.com/ | 24 hours | [Chrome 54](https://crrev.com/414378) | 12 Feb 2018 23:59:59 UTC. |
| [StartCom](https://www.startssl.com/) | StartCom CT Log | https://ct.startssl.com/ | 24 hours | [Chrome 54](https://crrev.com/414440) | 12 Feb 2018 23:59:59 UTC. |
| [CNNIC](https://cnnic.cn/) | CNNIC CT Log | https://ctserver.cnnic.cn/ | 24 hours | [Chrome 53](https://crrev.com/396817) | 18 Sep 2018 00:00:00 UTC. |
| [DigiCert](https://www.digicert.com/) | Symantec Log | https://ct.ws.symantec.com | 24 hours | [Chrome 45](https://crrev.com/483625) | 16 Feb 2019 00:00:00 UTC. |
| [DigiCert](https://www.digicert.com/) | Symantec 'Vega' Log | https://vega.ws.symantec.com/ | 24 hours | [Chrome 50](https://crrev.com/376143) | 16 Feb 2019 00:00:00 UTC. |
| [DigiCert](https://www.digicert.com/) | Symantec 'Sirius' Log | https://sirius.ws.symantec.com/ | 24 hours | [Chrome 60](https://crrev.com/481160) | 16 Feb 2019 00:00:00 UTC. |
| [Google](https://www.google.com/) | Google 'Argon2018' Log | https://ct.googleapis.com/logs/argon2018/ | 24 hours | [Chrome 65](https://crrev.com/540254) | Rejected - Shard Expired |
| [Cloudflare](https://www.cloudflare.com/) | Cloudflare 'Nimbus2018' Log | https://ct.cloudflare.com/logs/nimbus2018/ | 24 hours | [Chrome 65](https://crrev.com/540254) | Rejected - Shard Expired |
| [DigiCert](https://www.digicert.com/) | DigiCert 'Yeti2018' Log | https://yeti2018.ct.digicert.com/log/ | 24 hours | [Chrome 67](https://crrev.com/559734) | Rejected - Shard Expired |

## Policy Version
Chromium Certificate Transparency Policy Version 1.0

0 comments on commit d75481c

Please sign in to comment.