Enum ExpectCt

pub enum ExpectCt {
    Enforce(Duration),
    Report(Duration, Absolute<'static>),
    ReportAndEnforce(Duration, Absolute<'static>),
}

The Expect-CT header: enables reporting and/or enforcement of Certificate Transparency.

Certificate Transparency can detect and prevent the use of incorrectly issued malicious, or revoked TLS certificates. It solves a variety of problems with public TLS/SSL certificate management and is valuable measure for all public TLS applications.

If you’re just getting started with certificate transparency, ensure that your site is in compliance before you enable enforcement with ExpectCt::Enforce or ExpectCt::ReportAndEnforce. Failure to do so will result in the browser refusing to communicate with your application. You have been warned.

Variants

Enforce(Duration)

Enforce certificate compliance for the next Duration. Ensure that your certificates are in compliance before turning on enforcement. (Shield default).

Report(Duration, Absolute<'static>)

Report to Absolute, but do not enforce, compliance violations for the next Duration. Doesn’t provide any protection but is a good way make sure things are working correctly before turning on enforcement in production.

ReportAndEnforce(Duration, Absolute<'static>)

Enforce compliance and report violations to Absolute for the next Duration.

Trait Implementations

impl Default for ExpectCt

Defaults to ExpectCt::Enforce with a 30 day duration, enforce CT compliance, see draft standard for more.

fn default() -> ExpectCt

Returns the “default value” for a type.

impl From<&ExpectCt> for Header<'static>

fn from(expect: &ExpectCt) -> Self

Converts to this type from the input type.

impl Policy for ExpectCt

const NAME: &'static str = "Expect-CT"

The actual name of the HTTP header.

fn header(&self) -> Header<'static>

Returns the Header to attach to all outgoing responses.