alt Hacker NewsSCT enforcement falls to the client though, yeah? What's stopping someone from signing a rogue cert silently which is accepted by CT-lenient clients?
SCT enforcement falls to the client though, yeah? What's stopping someone from signing a rogue cert silently which is accepted by CT-lenient clients?
Right, but you don't have to wait for some hapless random browser to check; you can write your own monitor, and people do that.