Comment by agwa
11 hours ago
There were no certificates from the compromised intermediates logged to CT prior to remediation by the browsers.
11 hours ago
There were no certificates from the compromised intermediates logged to CT prior to remediation by the browsers.
Which is good because certificates not in CT logs are treated as invalid/untrusted.
But only by browsers. curl, autoupdaters etc. would still all accept them.