Has anyone found a good analysis of whether #CertificateTransparency (#CT) or #CertificationAuthorityAuthorization (#CAA) provided any kind of defense against exploits using #eMudhra? CT should but isn't implemented everywhere. I guess CAA didn't help because it is a check that is implemented at the #CertificationAuthority and someone who has the #eMudhra private keys (e.g. everyone) can generate a #MITM certificate and just not check the CAA stuff.