4 ms·

Yes, Chrome and Safari will not load a site if the cert is not in CT. https://no-sct.badssl.com/ https://no-sct.badssl.com/

by judge2020 3y ago

sedatk 3y ago
also Edge. It's an open issue on Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=1281469 https://bugzilla.mozilla.org/show_bug.cgi?id=1281469
- ignoramous 3y ago
  Wow. Firefox should really prioritize this if all major browsers are doing it already.
  - sedatk 3y ago
    There is a theory which states that if ever anyone discovers exactly which decade old bug should be fixed in Firefox, it will instantly disappear and be replaced by some obscure web service by Mozilla Foundation. There is another theory which states that this has already happened. (in memory of Douglas Adams)
    - RunSet 3y ago
      Let's test that theory: It's this one. https://bugzilla.mozilla.org/show_bug.cgi?id=505521 https://bugzilla.mozilla.org/show_bug.cgi?id=505521
      - sedatk 3y ago
        Introducing RunSet™ by Mozilla Foundation: an installation customizer for Mozilla suite of software. Just visit mozilla.org/runset, click on what pieces of software you want, and a custom installer is generated just for you. You can even embed your profile picture to the installer to share it with your friends and family. Fully customizable, fully free. RunSet™: Install everything everywhere all at once. [Donate]
andreasha 3y ago
But not Brave apparently
- trishmapow2 3y ago
  Looks like it's in the beta https://github.com/brave/brave-browser/issues/22482 https://github.com/brave/brave-browser/issues/22482.
AndyMcConachie 3y ago
They will not load the site if the certificate does not have embedded SCTs. That's different. They don't actually go check and compare the embedded SCT with what is in the logs. It would be incredibly slow to load the site if they did that.
- Maxious 3y ago
  This is going to blow your mind but they do, it's called the Inclusion Checking phase https://docs.google.com/document/d/1FP5J5Sfsg0OR9P4YT0q1dM02iavhi8ix1mZlZe_z-ls/edit https://docs.google.com/document/d/1FP5J5Sfsg0OR9P4YT0q1dM02...

Yes, Chrome and Safari will not load a site if the cert is not in CT. https://no-sct.badssl.com/ https://no-sct.badssl.com/

sedatk 3y ago

also Edge. It's an open issue on Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=1281469 https://bugzilla.mozilla.org/show_bug.cgi?id=1281469

ignoramous 3y ago
Wow. Firefox should really prioritize this if all major browsers are doing it already.
- sedatk 3y ago
  There is a theory which states that if ever anyone discovers exactly which decade old bug should be fixed in Firefox, it will instantly disappear and be replaced by some obscure web service by Mozilla Foundation. There is another theory which states that this has already happened. (in memory of Douglas Adams)
  - RunSet 3y ago
    Let's test that theory: It's this one. https://bugzilla.mozilla.org/show_bug.cgi?id=505521 https://bugzilla.mozilla.org/show_bug.cgi?id=505521
    - sedatk 3y ago
      Introducing RunSet™ by Mozilla Foundation: an installation customizer for Mozilla suite of software. Just visit mozilla.org/runset, click on what pieces of software you want, and a custom installer is generated just for you. You can even embed your profile picture to the installer to share it with your friends and family. Fully customizable, fully free. RunSet™: Install everything everywhere all at once. [Donate]

andreasha 3y ago

But not Brave apparently

trishmapow2 3y ago
Looks like it's in the beta https://github.com/brave/brave-browser/issues/22482 https://github.com/brave/brave-browser/issues/22482.

AndyMcConachie 3y ago

They will not load the site if the certificate does not have embedded SCTs. That's different. They don't actually go check and compare the embedded SCT with what is in the logs. It would be incredibly slow to load the site if they did that.

Maxious 3y ago
This is going to blow your mind but they do, it's called the Inclusion Checking phase https://docs.google.com/document/d/1FP5J5Sfsg0OR9P4YT0q1dM02iavhi8ix1mZlZe_z-ls/edit https://docs.google.com/document/d/1FP5J5Sfsg0OR9P4YT0q1dM02...