5 ms·
> How does a browser enforce CT? The certificate contains signatures from the CT logs. The browser can either accept those signatures or check the CT log itsel
by vanchor3 3y ago
> How does a browser enforce CT?
The certificate contains signatures from the CT logs. The browser can either accept those signatures or check the CT log itself. This "enforces" CT for the certificate of the site you're accessing, but not necessarily the CA.
Of course if a certificate comes up that fails CT logging, that can raise scrutiny of the CA.