Timeline for What exactly does it mean when Chrome reports 'no certificate transparency information was supplied by the server?'
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 9, 2015 at 16:12 | comment | added | StackExchange User | If you're running a private PKI system, you'd have to spin up your own log server and add a command line flag to Chrome to trust it. Then you'd have to obtain a SCT from said log and then use the TLS extension to send it. | |
| Apr 23, 2015 at 3:46 | comment | added | MC9000 | Looks like there is no way out of buying the more "expensive" certs, ugh! (this is ridiculous, if CA's are not accountable, then why are we getting raped for cert prices?! What are we paying for?! ) | |
| Apr 21, 2015 at 23:48 | comment | added | user29925 | The problem exists because (1) CAs are not held responsible or accountable; and (2) we've experienced a number of CA failures in the past. The reason CAs are not responsible or accountable is because Browsers and CAs collude at the CA/Browser Forum. They make up the rules to suite their taste as they go (yes, the browsers are complicit). Browser security is such a joke... | |
| Apr 21, 2015 at 23:47 | comment | added | user29925 | Oh, in layman's terms: the bar to entry was just raised. If you are running a private PKI, then you are being corralled into buying a certificate from a participating CA. Participating CAs have to publish certified logs to show that they are issuing certificates for domains they are authorized. Also see the CT FAQ for the two other ways to comply. | |
| Apr 21, 2015 at 23:17 | comment | added | MC9000 | Can someone answer this in layman's terms? How do website owners remedy this problem? Do we need to buy a new certificate? If so, where do we get one? All my sites use Register.com SSL certs and ALL of them get this dreaded message scaring customers away! | |
| Apr 19, 2015 at 23:58 | history | edited | user29925 | CC BY-SA 3.0 |
Added info on creating an server certifcate
|
| Apr 19, 2015 at 23:27 | history | answered | user29925 | CC BY-SA 3.0 |