RFC:https://tools.ietf.org/html/rfc6962

Right now the s2n Client can request and accept SCT TLS Extensions, but does not validate the extension.

Functions2n_recv_server_sct_list() ins2n_server_extensions.cconn->ct_response is never validated before being copied to the connection struct.