Require log submitters to verify SCTs

Require log submitters to verify SCTs (Trac issue #3)

[Eran, 2014-03-04 15:47:30]

Added language suggested in ticket #2
(http://trac.tools.ietf.org/wg/trans/trac/ticket/2), removed language about
submitters not being required to verify the SCT, clarified that log clients
which do *not* use the returned SCT should be forward-compatible.

[Ben Laurie (Google), 2014-03-06 16:22:33]

https://codereview.appspot.com/68960047/diff/1/doc/rfc6962-bis.xml
File doc/rfc6962-bis.xml (right):

https://codereview.appspot.com/68960047/diff/1/doc/rfc6962-bis.xml#newcode979
doc/rfc6962-bis.xml:979: Submitters submit certificates or Precertificates to
the log as described above. They may go on to use the returned SCT to construct
a certificate or use it directly in a TLS handshake. Log clients who request an
SCT for inclusion in a certificate or during TLS handshakes SHOULD verify it.
Perhaps make it clear that it may not be the log client who does the including?

[Eran, 2014-05-02 10:39:59]

PTAL.

https://codereview.appspot.com/68960047/diff/1/doc/rfc6962-bis.xml
File doc/rfc6962-bis.xml (right):

https://codereview.appspot.com/68960047/diff/1/doc/rfc6962-bis.xml#newcode979
doc/rfc6962-bis.xml:979: Submitters submit certificates or Precertificates to
the log as described above. They may go on to use the returned SCT to construct
a certificate or use it directly in a TLS handshake. Log clients who request an
SCT for inclusion in a certificate or during TLS handshakes SHOULD verify it.
On 2014/03/06 16:22:33, Ben Laurie (Google) wrote:
> Perhaps make it clear that it may not be the log client who does the
including?

Done.

[Ben Laurie (Google), 2014-05-07 13:23:48]

LGTM

[Eran, 2014-05-08 14:27:23]

On 2014/05/07 13:23:48, Ben Laurie (Google) wrote:
> LGTM

Pushed as
https://code.google.com/p/certificate-transparency/source/detail?r=41f38c0c3e...
and
https://code.google.com/p/certificate-transparency/source/detail?r=0318af9954....