From 6feffc731baa7d4e5b8bbc3fd7d30ca52534d18d Mon Sep 17 00:00:00 2001 From: Jonathan Hodgson Date: Fri, 11 Dec 2020 15:38:28 +0000 Subject: [PATCH] BIN: analyse-headers: improve expect-ct description --- bin/.bin/webtest/analyse-headers | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/bin/.bin/webtest/analyse-headers b/bin/.bin/webtest/analyse-headers index 1b42d93d..780f7e86 100755 --- a/bin/.bin/webtest/analyse-headers +++ b/bin/.bin/webtest/analyse-headers @@ -331,7 +331,11 @@ test_expect-ct(){ that the browser check that any certificate for that site appears in public \ CT logs. Initially, set the header without the enforce option but with report in order \ -to check for potential breakages\n\n" +to check for potential breakages. +The Expect-CT will likely become obsolete in June 2021. Since May 2018 new \ +certificates are expected to support SCTs by default. Certificates before \ +March 2018 were allowed to have a lifetime of 39 months, those will all be \ +expired in June 2021.\n\n" return 2 elif ! echo "$value" | grep -q "enforce"; then echo "Expect-CT" | drawInBox