README

👁 Build Status
👁 Scrutinizer Code Quality
👁 codecov

The Expect-CT HTTP header tells browsers to expect Certificate Transparency. For more information, see this blog post by Scott Helme and the in-progress spec.

Expect-CT Builder was inspired by ParagonIE\CSPBuilder

Usage

<?php

use \Pepeverde\ECTBuilder\ECTBuilder;

$expectCT = new ECTBuilder([
 'enforce' => true,
 'maxAge' => 30,
 'reportUri' => 'https://example.org/report'
]);
$expectCT->sendECTHeader();

Inject an Expect-CT into a PSR-7 message

Instead of invoking sendECTHeader(), you can instead inject the headers into your PSR-7 message object by calling it like so:

/**
 * $yourMessageHere is an instance of an object that implements 
 * \Psr\Http\Message\MessageInterface
 *
 * Typically, this will be a Response object that implements 
 * \Psr\Http\Message\ResponseInterface
 *
 * @ref https://github.com/guzzle/psr7/blob/master/src/Response.php
 */
$expectCT->injectECTHeader($yourMessageHere);