Re:Creating apps like Signal could be 'hostile activity' cla...
by CommanderData on Thursday December 18, 2025 @12:27PM
(#46315754)
Isn't certificate transparency opt-in, so any trusted CA could be a potential attack route.
[ Parent
| on HN ]
Re:Creating apps like Signal could be 'hostile activity' cla...
by JoshTriplett on Thursday December 18, 2025 @12:56PM
(#46316144)
Browsers now require it to consider a certificate valid. Firefox, Chrome, and Safari all require a certificate to include proof of being logged in CT logs.