@techreport{ietf-trans-threat-analysis-16, number = {draft-ietf-trans-threat-analysis-16}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-trans-threat-analysis/16/}, author = {Stephen Kent}, title = {{Attack and Threat Model for Certificate Transparency}}, pagetotal = 32, year = 2018, month = oct, day = 5, abstract = {This document defines an attack model and discusses threats based on the system design presented in {[}I-D.ietf-trans-rfc6962-bis{]}. It analyzes potential vulnerabilities associated with that design, and considers compromises of system elements and malicious behavior by such elements. It does not consider implementation vulnerabilities, including ones that might enable denial of service attacks against these elements.}, }