英文:

What is the source of "Expect-CT" header in the requests?

问题

I've noticed that the "Expect-CT" header is present in the requests made to my website, but I'm unsure which service is responsible for adding this header. I'm particularly interested in determining whether it is Vercel or Cloudflare that is injecting the "Expect-CT" header into the requests.

这里提到网站请求中存在“Expect-CT”头部，但我不确定是哪个服务添加了这个头部。我特别想知道是Vercel还是Cloudflare将“Expect-CT”头部注入到请求中。

This is the error from Google Pagespeed service (Lighthouse).

这是来自Google Pagespeed服务（Lighthouse）的错误信息。

Uses deprecated APIs:

• The Expect-CT header is deprecated and will be removed. Chrome requires Certificate Transparency for all publicly trusted certificates issued after April 30, 2018.

使用了不推荐的API：

• Expect-CT头部已过时，并将被移除。Chrome要求所有在2018年4月30日之后颁发的公开信任的证书必须支持证书透明性。

Could someone clear it for the origin of the "Expect-CT" header in website requests? Is it added automatically by Vercel or Cloudflare, or do I need to configure it explicitly in one of these services? If it's automatically added, can I customize its settings or disable it if necessary?

有人可以解释一下网站请求中“Expect-CT”头部的来源吗？它是由Vercel还是Cloudflare自动添加的，还是我需要在其中一个服务中显式配置它？如果它是自动添加的，是否可以自定义其设置或在必要时禁用它？

英文:

I've noticed that the "Expect-CT" header is present in the requests made to my website, but I'm unsure which service is responsible for adding this header. I'm particularly interested in determining whether it is Vercel or Cloudflare that is injecting the "Expect-CT" header into the requests.

this is the error from Google Pagespeed service (Lighthouse).

Uses deprecated APIs:

• The Expect-CT header is deprecated and will be removed. Chrome requires Certificate Transparency for all publicly trusted certificates issued after April 30, 2018.

Could someone clear it for the origin of the "Expect-CT" header in website requests? Is it added automatically by Vercel or Cloudflare, or do I need to configure it explicitly in one of these services? If it's automatically added, can I customize its settings or disable it if necessary?

答案1

得分: 1

这个标题很可能来自CloudFlare。我在我的托管在Vercel上的网站上没有看到"Expect-CT"标题。

请查看以下讨论中描述的解决方案是否适用于您的情况。

https://community.cloudflare.com/t/deprecated-expect-ct-header/485737

英文:

Most likely this header is coming from CloudFlare. I do not see the "Expect-CT" header on my websites hosted on Vercel.

Please see if the solution described in the following discussion is applicable in your case.

https://community.cloudflare.com/t/deprecated-expect-ct-header/485737