Deprecated Feature Used Expect-CT header

Created on 8 November 2022, over 2 years ago
Updated 1 June 2023, almost 2 years ago

Problem/Motivation

Receive the following issue on Chrome's DevTools console despite the Expect-CT header is not enabled.

"The Expect-CT header is deprecated and will be removed. Chrome requires Certificate Transparency for all publicly trusted certificates issued after April 30, 2018.
Learn more: Check the feature status page for more details.
Learn more: This change will go into effect with milestone 107."

Steps to reproduce

Expect-CT header is not enabled in the seckit module
Navigated to the homepage, opened DevTools, clicked on the Issues tab

Proposed resolution

Remove the Expect-CT field in the Security Kit configuration page as the header is no longer recommended. For more info, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT.

πŸ› Bug report
Status

Needs review

Version

2.0

Component

Code

Created by

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024