I think that short-lifetime certificates are still the best, but I do see a value with CT, namely dealing with a newly-acquired domain (especially a domain with

I think that short-lifetime certificates are still the best, but I do see a value with CT, namely dealing with a newly-acquired domain (especially a domain with a history). Without CT, you're in mercy of other holders being honest unless you contact every single CA to revoke any theoretical certificates that they might or might not issue. With CT, you just need to contact specific CAs that there has been a change in ownership and to revoke any previous certificates issued.