3 ms·
Not when the cert has been previously CT and Staple preloaded I suspect?
by Avamander 7y ago
Not when the cert has been previously CT and Staple preloaded I suspect?
- michaelt 7y agoIf a user manually imports a CA, it bypasses protections like CT [1]. This is a feature specifically designed to allow MITM for corporate proxies. Always seemed like a misfeature to me, but all the browsers do it. [1] https://chromium.googlesource.com/chromium/src/+/master/net/docs/certificate-transparency.md#Locally_trusted-CAs https://chromium.googlesource.com/chromium/src/+/master/net/...
- Avamander 7y agoSounds ridiculous that even when a site host specifically says they want things Stapled and CTd are ignored like that.