3 ms·
They will not load the site if the certificate does not have embedded SCTs. That's different. They don't actually go check and compare the embedded SCT with wh
by AndyMcConachie 3y ago
They will not load the site if the certificate does not have embedded SCTs. That's different.
They don't actually go check and compare the embedded SCT with what is in the logs. It would be incredibly slow to load the site if they did that.
- Maxious 3y agoThis is going to blow your mind but they do, it's called the Inclusion Checking phase https://docs.google.com/document/d/1FP5J5Sfsg0OR9P4YT0q1dM02iavhi8ix1mZlZe_z-ls/edit https://docs.google.com/document/d/1FP5J5Sfsg0OR9P4YT0q1dM02...