Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

They will not load the site if the certificate does not have embedded SCTs. That's different.

They don't actually go check and compare the embedded SCT with what is in the logs. It would be incredibly slow to load the site if they did that.



This is going to blow your mind but they do, it's called the Inclusion Checking phase https://docs.google.com/document/d/1FP5J5Sfsg0OR9P4YT0q1dM02...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: