That's ridiculous. The popular CAs are not part of the TLS standard and neither is CT. Plenty of intranet TLS with intetnal CAs. CTs are good if the end client

That's ridiculous. The popular CAs are not part of the TLS standard and neither is CT. Plenty of intranet TLS with intetnal CAs. CTs are good if the end client only uses root CAs that participate. Let's say CT solves the server authentication issues,how does does the server authenticate the client? End to end means both parties authenticate,TLS supports client authnetication but a) DNS over HTTPs isn't doing that b) even if it did there isn't CT for client certs...