RFC6962-bis: Clarify which certs/SCTs an Auditor will actually encounter about certificate-transparency HOT 4 CLOSED

Section 3 says:
"Auditors can thus verify that each certificate for which an SCT has been issued indeed appears in the log."

This sentence seems to (wrongly) imply that an Auditor is guaranteed to see every SCT that a Log issues. In fact, an Auditor will only see the SCTs that it happens to encounter, and won't know how many SCTs remain unseen.

Suggested re-wording of that Section 3 paragraph:
"Periodically, each log appends all its new entries to the Merkle Tree and signs the root of the tree. The log MUST incorporate a certificate in its Merkle Tree within the Maximum Merge Delay period after the issuance of the SCT. When encountering an SCT, an Auditor can verify that the certificate was added to the Merkle Tree within that timeframe."

from certificate-transparency.

Makes sense - Ben, anything to add about the wording of the original sentence?

from certificate-transparency.

Fixed in 16fdb7b.

from certificate-transparency.

Fixed in r16fdb7bee7db.

from certificate-transparency.