cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Certificate Transparency?

What is GoDaddy doing with regards to Certificate Transparency (https://www.certificate-transparency.org/) with regards to current certificates?

 

I am not seeing any information for our certificates when following the instructions from Google

https://www.certificate-transparency.org/certificate-transparency-in-chrome 

 

Inquiring minds want to know. Thanks for any information. April 30, 2018 is coming soon...

5 REPLIES 5

Re: Certificate Transparency?

Whats the update on the same?

Domain owners need to do anything from their end?

Is there any change in the certificates?

 

Since we install all the certificates in our servers, if any change in the certificate needs to be re-installed in our servers.

Re: Certificate Transparency?

According to Google, currently issued certificates are unaffected:

 

https://groups.google.com/a/chromium.org/forum/#!topic/ct-policy/wHILiYf31DE

Re: Certificate Transparency?

I am also concerned with the topic of certificate transparency.  I do not believe that the answer is that no action is required.  When I run an ssl test against my site using https://www.ssllabs.com/ssltest/ the result contains "Certificate Transparency = no".  The result is explained in the post below, but essentially means that the SCT is not being returned by any of the available options.  I feel the best solution would be to reissue the certificate so that it would provide the SCT in the certificate X.509v3 extension.  Is it possible to request this from Godaddy?

 

https://community.qualys.com/thread/16972-how-is-certificate-checked-for-certificate-transparency

 

 

Re: Certificate Transparency?

Support just told me the Godaddy SSL will not be made transparent as they are domain based not IP based. So thats me not renewing at £54...

Re: Certificate Transparency?

Being domain-based as opposed to IP-based should have nothing to do with certificate transparency! All public CAs are domain-based... IP-based certs were discontinued a few years ago. If GoDaddy is not willing to implement certificate transparency I am going to be forced to move all of my business to another vendor.