Chrome Requiring Certificate Transparency in 2017
This is very cool.  CT is a good step in monitoring for CA misbehavior. My employer's users can be target of phishing attacks, so having all TLS certs in CT is a great source of data to detect phishing sites earlier.I wonder how this will work for "internal" domains issued off a private CA, though.  Will this be enforced by chrome, or is this just a CA/B rule?