What browsers actually do that? And do all CAs support it?
Besides, if you have enough access to the CA, you can just get whatever cert is in the transparency log, though that's almost certainly harder for most nations and CAs.
Besides, if you have enough access to the CA, you can just get whatever cert is in the transparency log, though that's almost certainly harder for most nations and CAs.
Chrome, Safari, Firefox.
> And do all CAs support it?
Yes, the browsers made them.
> Besides, if you have enough access to the CA, you can just get whatever cert is in the transparency log
No, the CA doesn't have the private key of certs.
> No, the CA doesn't have the private key of certs.
Woops, yeah good point.
That would require compromising the certificate requester.
But it requires a lot more steps.