robpercival

Certificate Transparency - False Positive

Discussion created by robpercival on Apr 7, 2016
Latest reply on May 3, 2016 by robpercival

The SSL report shows "Certificate Transparency: Yes", even if the web server does not provide any SCTs. It checks only for the presence of an SCT list, but does not check that it isn't empty. Could this be fixed please?

Outcomes