Skip to content

Commit

Permalink
Firefox desktop now requires CT (#37777)
Browse files Browse the repository at this point in the history
* Firefox desktop now requires CT

On desktop platforms, Firefox now requires certificate transparency information for all certificates issued by certificate authorities in Mozilla's Root CA Program.

* Apply suggestions from code review

---------

Co-authored-by: Hamish Willee <[email protected]>
  • Loading branch information
mozkeeler and hamishwillee authored Jan 26, 2025
1 parent 9575597 commit bf90120
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions files/en-us/web/security/certificate_transparency/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -34,8 +34,9 @@ With the latter methods, servers will need to be updated to send the required da

## Browser Requirements

Google Chrome requires CT log inclusion for all certificates issues with a notBefore date of after 30 April 2018. Users will be prevented from visiting sites using non-compliant TLS certificates. Chrome had previously required CT inclusion for _Extended Validation_ (EV) and Symantec-issued certificates.
Google Chrome 107 and later requires CT log inclusion for all certificates issued with a notBefore date of after 30 April 2018. Users will be prevented from visiting sites using non-compliant TLS certificates.
Chrome had previously required CT inclusion for _Extended Validation_ (EV) and Symantec-issued certificates.

Apple [requires](https://support.apple.com/en-gb/103214) a varying number of SCTs in order for Safari and other servers to trust server certificates.

Firefox [does not](https://bugzil.la/1281469) currently check or require the use of CT logs for sites that users visit.
Firefox desktop from version 135 requires CT log inclusion for all certificates issued by certificate authorities in Mozilla's Root CA Program. Firefox for Android does not currently require CT log inclusion.

0 comments on commit bf90120

Please sign in to comment.