It sure does. Use a browser or other web client that does not trust certificates unless they appear in CT logs. A rouge CA then has to lie publicly by putting t

It sure does. Use a browser or other web client that does not trust certificates unless they appear in CT logs. A rouge CA then has to lie publicly by putting the false cert into the log, which in turn gets flagged and they don't get to be a CA anymore.