pepeverde/expect-ct-builder

Easily add Excepct-CT header to your project

Expect-CT Builder

, _(*1)

The Expect-CT HTTP header tells browsers to expect Certificate Transparency. For more information, see this blog post by Scott Helme and the in-progress spec., _(*2)

Expect-CT Builder was inspired by ParagonIE\CSPBuilder, _(*3)

Usage

<?php

use \Pepeverde\ECTBuilder\ECTBuilder;

$expectCT = new ECTBuilder([
    'enforce' => true,
    'maxAge' => 30,
    'reportUri' => 'https://example.org/report'
]);
$expectCT->sendECTHeader();

Inject an Expect-CT into a PSR-7 message

Instead of invoking sendECTHeader(), you can instead inject the headers into your PSR-7 message object by calling it like so:, _(*4)

/**
 * $yourMessageHere is an instance of an object that implements 
 * \Psr\Http\Message\MessageInterface
 *
 * Typically, this will be a Response object that implements 
 * \Psr\Http\Message\ResponseInterface
 *
 * @ref https://github.com/guzzle/psr7/blob/master/src/Response.php
 */
$expectCT->injectECTHeader($yourMessageHere);