Post #2603614

@pl@mastodon.social though certificate transparency also wasn't honored until somewhat recently and that was definitely not intended https://github.com/GrapheneOS/Vanadium/issues/779 I can speak on behalf on ungoogled-chromium, where not doing any outgoing requests is a deliberate design choice. So it's down to fetching CRLs out of band (for example with OS support) or praying for short lived certificates