topic Certificate Transparency? in SSL And Security

Certificate Transparency?

robertgl — Tue, 27 Feb 2018 19:53:35 GMT

What is GoDaddy doing with regards to Certificate Transparency (https://www.certificate-transparency.org/) with regards to current certificates?

I am not seeing any information for our certificates when following the instructions from Google

https://www.certificate-transparency.org/certificate-transparency-in-chrome

Inquiring minds want to know. Thanks for any information. April 30, 2018 is coming soon...

Re: Certificate Transparency?

prabhathkota — Wed, 28 Feb 2018 05:23:31 GMT

Whats the update on the same?

Domain owners need to do anything from their end?

Is there any change in the certificates?

Since we install all the certificates in our servers, if any change in the certificate needs to be re-installed in our servers.

Re: Certificate Transparency?

AustinBoston — Wed, 28 Feb 2018 14:59:21 GMT

According to Google, currently issued certificates are unaffected:

https://groups.google.com/a/chromium.org/forum/#!topic/ct-policy/wHILiYf31DE

Re: Certificate Transparency?

ksstraight — Sat, 03 Mar 2018 19:27:36 GMT

I am also concerned with the topic of certificate transparency. I do not believe that the answer is that no action is required. When I run an ssl test against my site using https://www.ssllabs.com/ssltest/ the result contains "Certificate Transparency = no". The result is explained in the post below, but essentially means that the SCT is not being returned by any of the available options. I feel the best solution would be to reissue the certificate so that it would provide the SCT in the certificate X.509v3 extension. Is it possible to request this from Godaddy?

https://community.qualys.com/thread/16972-how-is-certificate-checked-for-certificate-transparency