3 ms·
The plan for CT was always to be once extended to all certs. And I think this is right. This whole system has suffered from security failures kept under the rug
by hannob 11y ago
The plan for CT was always to be once extended to all certs. And I think this is right. This whole system has suffered from security failures kept under the rug for too long, more transparency is good.
If you don't want transparency of your certificates don't participate in the public CA system. You still have the option of using wildcards for internal names.