Information
Google Chrome allows to disable the enforcing of Certificate Transparency requirements for a list of Legacy Certificate Authorities.
Rationale:
Legacy Certificate Authorities shall follow the Certificate Transparency policy.
Solution
To establish the recommended configuration via Group Policy, set the following UI path to Disabled:
Computer Configuration\Administrative Templates\Google\Google Chrome\Disable Certificate Transparency enforcement for a list of Legacy Certificate Authorities
Impact:
If this setting is disabled, certificates not properly publicly disclosed as required by Certificate Transparency are untrusted.
Default Value:
Disabled.