google / keytransparency

A transparent and secure way to look up public keys.
https://security.googleblog.com/2017/01/security-through-transparency.html
Apache License 2.0
1.57k stars 152 forks source link

Pruning? #1015

Open idibidiart opened 6 years ago

idibidiart commented 6 years ago

Hi,

Any plans to support pruning?

For example, for keys that have not been accessed in 10 years?

See this: https://groups.google.com/forum/#!topic/certificate-transparency/tsZsUP0Lxk8

I assume all docs are in sync with the master branch?

gdbelvin commented 6 years ago

Hi,

Pruning is something we're thinking about. Trillian Logs are typically sharded by the expiry of certificate certificates so they have a natural end of life. Trillian Maps are still evolving a bit, but something analogous would be desirable. eg. The history for the Trillian Map could stop returning responses for tree revisions X number of years in the past.