Google 宣佈他們開始收 Untrusted CA 的 Certificate Transparency 記錄:「Certificate Transparency for Untrusted CAs」,主要是這兩種 CA:
- Those that were once trusted and have since been withdrawn from the root programs.
- New CAs that are on the path to inclusion in browser trusted roots.
也就是被幹掉的,以及申請中的... 這樣可以後續追蹤很多東西。