Expect-GCT
Expect-CT lets a site require browsers to verify Certificate Transparency (CT) and report violations, serving as the replacement after HPKP was deprecated.
Purpose
It has browsers verify that the server certificate carries valid, auditable SCTs and report violations, progressively enforcing CT.
Mechanism
The site sends an Expect-CT header with max-age and report-uri. The browser checks the certificate's CT compliance and POSTs a violation report to report-uri; while max-age is in effect, certificates lacking CT are rejected.
Use cases
- CT enforcement
- Certificate auditing
- HPKP replacement
Related tools
HTTP Status Codes
Reference table of common HTTP status codes (1xx-5xx) with names, categories, and descriptions. Free, private, and 100% client-side. TOOL
URL Parser
Parse a URL into its components: protocol, host, path, query, hash, port, username, and password. Free, private, and 100% client-side. TOOL