Skip to content

Certificate Transparency is defined in RFC 6962, not RFC 9162 #35570

@AGWA

Description

@AGWA

MDN URL

https://developer.mozilla.org/en-US/docs/Web/Security/Certificate_Transparency

What specific section or headline is this issue about?

No response

What information was incorrect, unhelpful, or incomplete?

The first paragraph states that Certificate Transparency (CT) is defined in RFC 9162. That RFC defines a version of CT that is incompatible with the version of CT that is actually deployed on the Web today. All CT logs and consumers implement a version of CT that is defined in RFC 6962. There are no plans to adopt RFC 9162.

What did you expect to see?

I expected it to reference RFC 6962, since that is the version deployed today.

Do you have any supporting links, references, or citations?

https://www.rfc-editor.org/rfc/rfc6962

Apple and Chrome CT policies both reference RFC 6962:

https://support.apple.com/en-us/103703

https://googlechrome.github.io/CertificateTransparency/log_policy.html

Do you have anything more you want to share?

No response

MDN metadata

Page report details

Metadata

Metadata

Assignees

No one assigned

    Labels

    Content:SecuritySecurity docshelp wantedIf you know something about this topic, we would love your help!

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions