He doesn't understand what CT does. Yeah, it's technically true that CT isn't designed to directly prevent most attacks. THe largest effect of CT is that CAs

He doesn't understand what CT does. Yeah, it's technically true that CT isn't designed to directly prevent most attacks. THe largest effect of CT is that CAs get pressured to get their stuff in order. It has been a major milestone in improving the ecosystem, particularly because it also led to many real distrusts, including of one of the largest CAs at all (Symantec). Yes, CT doesn't try to prevent most attacks directly. It tries to create an ecosystem where CAs fear getting distrusted when they don't prevent attacks in the first place. And it works very well.