Comment by joxdosba

> If you're a CA you can just issue a cert and not publish it in the CT logs. You're not supposed to do that, but there is nothing stopping it.

Browsers have mandated CT logging for years and will not accept such a certificate.

Why is it so common to incorrectly assume that the people who came up with CT were stupid?