3 ms·

Yeah, I think they do, actually. Two things... Proxies are a thing, and stripping the Expect-CT header is trivial. Any CA can generate a valid SSL cert for a

by tinix 7y ago

Yeah, I think they do, actually. Two things... Proxies are a thing, and stripping the Expect-CT header is trivial. Any CA can generate a valid SSL cert for any domain.