Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Certificate Transparency verification only requires the server provide stapled proof (either to the certificate itself or a OCSP response) that the certificate was submitted to the public logs. It does not involve any extra requests from the browser to a third party; at most it involves a periodic request from the server to the CA with no client-specific data.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: