Per Chrome's all_logs_list.json, the Argon2027h1 log is Qualified but not
yet Usable. That means that some up-to-date Chrome instances may trust it
(as your testing found), but not all Chrome instances around the world. It
generally takes about 70 days for a log to transition from Qualified to
Usable, to account for this propagation delay.

On Tue, Dec 2, 2025, 08:16 Arabella Barks <[email protected]> wrote:

> Hey Andrew,
>
> Thanks for expanding on the topic! I know following up in a further thread
> comment isn’t ideal,
> but I’m curious -- where did you learn that "Google Argon 2027h1, which is
> usable by Apple, is not yet usable by Chrome or Mozilla"? From my testing,
> Google Argon 2027h1 has actually been verified to work on Chrome:
>
>
> Regards,
> Ara.
> On Tuesday, December 2, 2025 at 9:23:36 PM UTC+8 Andrew Ayer wrote:
>
>> Hi Arabella,
>>
>> I recommend raising this on the ct-policy mailing list (
>> https://groups.google.com/a/chromium.org/g/ct-policy).
>>
>> Though my question would be - why is Certum issuing certificates with
>> embedded SCTs from a log that's not listed as Qualified or Usable in
>> Apple's log list?
>>
>> This certificate also contains an SCT from Google Argon 2027h1, which
>> while Usable by Apple, is not yet Usable by Chrome or Mozilla.
>>
>> Regards,
>> Andrew
>>
>>
>> On Mon, 1 Dec 2025 19:51:28 -0800 (PST)
>> Arabella Barks <[email protected]> wrote:
>>
>> > [image: 9312cc9414c2e964bffb1f53f6d215e5.png]
>> >
>> > DigiCert 'Wyvern2027h1'
>> > LogID: 00 1A 5D 1A 1C 2D 93 75 B6 48 55 78 F8 2F 71 A1 AE 6E EF 39 7D
>> > 29 7C 8A E3 15 7B CA DE E1 A0 1E
>> > DigiCert 'sphinx2027h1'
>> > LogID: 46 A2 39 67 C6 0D B6 46 87 C6 6F 3D F9 99 94 76 93 A6 A6 11 20
>> > 84 57 D5 55 E7 E3 D0 A1 D9 B6 46
>> >
>> >
>> > --
>> > You received this message because you are subscribed to the Google
>> > Groups "[email protected]" group. To unsubscribe from
>> > this group and stop receiving emails from it, send an email to
>> > [email protected]. To view this discussion
>> > visit
>> >
>> https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/e437bda8-611f-47fd-95c5-bba884394f36n%40mozilla.org.
>>
>>
> --
> You received this message because you are subscribed to the Google Groups "
> [email protected]" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion visit
> https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/4ee3e1f9-d132-44ad-b522-c3469ff687acn%40mozilla.org
> <https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/4ee3e1f9-d132-44ad-b522-c3469ff687acn%40mozilla.org?utm_medium=email&utm_source=footer>
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CAEmnErf0fsny7dMWWd_sYvc0dx87DuirWgaeygoQMKQnX%3Dujmg%40mail.gmail.com.

Reply via email to