Post #2336643

@grawity@social.treehouse.systems a solution to that issue would be to calculate the prefixes in some way that is infeasible for an attacker to precompute, but trivial to check by the client after the fact. Say, by using a merkle tree with inclusion proofs. But now we're getting into the realm of certificate transparency.