3 ms·
With some exceptions, at least. For example, twitter.com shows up as an EV green bar while my browser tells me there's no CT information available. The CT websi
by Caer 11y ago
With some exceptions, at least. For example, twitter.com shows up as an EV green bar while my browser tells me there's no CT information available. The CT website mentions a list of exceptions would be generated but I haven't been able to find any public list, and there's been no update to their rollout plans in over 7 months[1].
Oddly enough I noticed the other day that certificate-transparency.org isn't even accessible over https.
[1] http://www.certificate-transparency.org/ev-ct-plan http://www.certificate-transparency.org/ev-ct-plan
- geofft 11y agoThe twitter.com cert I see in my browser was issued on 9 September 2014, which is before the 1 January 2015 threshold. (Eventually this should go away because a compromised CA key can obviously just lie about the time, but this is just a migration step.)
- Caer 11y agoYou're right, I missed that at the top of the doc. I assumed all of the details would be in the numbered list.