"entry_type" may be implicit from the context in which the SCT is presented.
So would Chrome reject a pre-cert's sct, if it was presented in an OCSP response for the actual EE cert?
Thanks,
Santhan
Yes, Chrome would reject that. You need to log the EE cert and use those SCTs in the OCSP staple. The same is true for the TLS extension. Pre-cert SCTs are only suitable for embedding in the EE cert.
--
You received this message because you are subscribed to the Google Groups "certificate-transparency" group.
To unsubscribe from this group and stop receiving emails from it, send an email to certificate-transp...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.