Timeline for How effective is Expect-CT against content inspection in an enterprise context?
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 13, 2023 at 22:32 | comment | added | JamesTheAwesomeDude | It seems a bit disturbing that Expect-CT is suppressed by the presence of a 3rd-party root -- this prevents the browser from tattling poorly-executed attempts by an actual internal network attacker to a reporting server specified by the TLS terminator, as well as totally denying the report capability from any site genuinely using a "3rd-party" root such as CAcert or the United States Government... | |
| Oct 30, 2020 at 15:21 | vote | accept | WoJ | ||
| Sep 24, 2019 at 12:06 | history | answered | Steffen Ullrich | CC BY-SA 4.0 |