What is the status of Certificate Transparency?

Question

I am reading a bit on the certificate transparancy project initiazed by google. (More info at http://www.certificate-transparency.org), this technology tries to introduce transparency in the creation of CA certificates. Their goal is that all SSL Certificates would be logged in multiple, publicly available logs run by independent companies and that browsers would only provide trust to certificates that are logged. Domain owners and interested parties would monitor the logs to detect certificates that were either misissued by the CA or not actually authorized by the organization (source).

I can't find a lot online on the adoption of this technology, is it really a game changer that in the future will prevent hacks like the digicert incident? Or is this just an initiative that isn't widely adopted?

http://www.certificate-transparency.org/known-logs

Answer 1

As of today (January 25, 2018), adoption of Certificate Transparency is not ubiquitous, but it is starting to gain momentum. Let's Encrypt logs all their certificates to CT logs, and several major CAs like DigiCert and Comodo run their own CT logs. Google Chrome already displays Certificate Tranparency information in its Dev Tools, and Firefox plans to add support in the near future.

Starting in April 2018, Google Chrome plans to start enforcing the use of Certificate Transparency in all newly issued certificates by refusing to treat them as valid unless they're included in at least two distinct, qualified Certificate Transparency logs. Once that happens, Certificate Transparency adoption will undoubtedly take off rapidly, as very few site operators will be willing to use a certificate that is not trusted by Chrome.