Certificate Transparency in Firefox

Certificate Transparency (CT) has been one of the biggest advancements in web security, keeping users safe from threats such as certificate fraud and man-in-the-middle attacks. While CT has been around for over 11 years, enforcement has varied across browsers. Firefox is now enforcing Certificate Transparency on desktop platforms, taking a significant step towards a safer web. With this change, effective in version 135, Firefox will reject certificates that do not comply with CT requirements. This ensures that all certificates trusted by the browser meet high transparency standards. What does this mean for Website Owners? It ensures that any TLS certificate trusted by Firefox is logged and publicly discoverable in a Certificate Transparency log. If your website already follows best practices and uses CT-compliant certificates, you don’t need to take any additional action. However, if you’re unsure, here are some steps you can take: Ensure your Certificate Authority (CA) supports CT ... Read full article.