Enum ExpectCt

pub enum ExpectCt {
    Enforce(Duration),
    Report(Duration, Uri<'static>),
    ReportAndEnforce(Duration, Uri<'static>),
}

The Expect-CT header: enables Certificate Transparency to detect and prevent misuse of TLS certificates.

Certificate Transparency solves a variety of problems with public TLS/SSL certificate management and is valuable measure for all public applications. If you’re just getting started with certificate transparency, ensure that your site is in compliance before you enable enforcement with ExpectCt::Enforce or ExpectCt::ReportAndEnforce. Failure to do so will result in the browser refusing to communicate with your application. You have been warned.

Variants

Enforce(Duration)

Enforce certificate compliance for the next Duration. Ensure that your certificates are in compliance before turning on enforcement. (SpaceHelmet default).

Report(Duration, Uri<'static>)

Report to Uri, but do not enforce, compliance violations for the next Duration. Doesn’t provide any protection but is a good way make sure things are working correctly before turning on enforcement in production.

ReportAndEnforce(Duration, Uri<'static>)

Enforce compliance and report violations to Uri for the next Duration.

Trait Implementations

impl Default for ExpectCt

Defaults to [ExpectCt::Enforce(Duration::days(30))], enforce CT compliance, see draft standard for more.

fn default() -> ExpectCt

Returns the “default value” for a type.

impl<'a> Into<Header<'static>> for &'a ExpectCt

fn into(self) -> Header<'static>

Converts this type into the (usually inferred) input type.

impl Policy for ExpectCt

const NAME: &'static str = "Expect-CT"

The actual name of the HTTP header.

fn header(&self) -> Header<'static>

Returns the Header to attach to all outgoing responses.