Overview of Syslog-Sign
Three kinds of messages
- Normal messages
- Signature blocks
- Certificate blocks
-
Normal messages sent unchanged
Each signature block signs N messages
- Contains hashes of N messages
- Don't need all N messages to verify signature
- Sent as a syslog message