Hi Wayne, On Sun, Oct 4, 2026 at 1:18 PM Wayne <[email protected]> wrote: > > Given the issues CAs have had on checking sanctioned entities against domains > I've put together an automatically updating list of unrevoked, unexpired > certificates. > > Site: https://sec-wayne.github.io/ct-sanctions-watch/ > CSV: https://sec-wayne.github.io/ct-sanctions-watch/sanctions.csv > JSON: https://sec-wayne.github.io/ct-sanctions-watch/sanctions.json > Commit history: https://github.com/Sec-Wayne/ct-sanctions-watch/commits/main/ > > I've already been in contact with most of the CAs mentioned to give them a > more up to date blocklist. The sources are cited on the page, and > certificates are only included if it's under that CA's legal jurisdiction. > This will be an undercount, but will be replacing the regular emails CAs have > received before. > > I'll try to keep this up to date going forward. Ideally the CAs will update > their blocklists overall and make this a moot project. > > Revocations are checked regularly, and expired certificates are also removed. > There'll be a small lag on inclusion as revocation checks are performed > first. This is to cover the case of a post-issuance checks on the CA's side > finding the side and immediately revoking. > > This will be covering any CA chaining to Mozilla, Chrome, Apple, or Microsoft > via CCADB checks. > > Any questions you know how to contact me.
This is not directed at you. Rather, you happened to make the post. I would advise caution here. Sanctions are a blunt instrument, and they rarely have an effect on the intended targets. Consider, the US has had an economic embargo and sanctions against Cuba for 64 years. Yet it has had little effect on the country's leadership. Instead, it punishes peasants who have no control over matters. A working man or woman in Russia does not eat at Putin's table. There's no sense in trying to punish the masses. The same holds for other regimes, like Cuba, Iran, North Korea and Syria. The working men and women have suffered enough. Leave them alone. Now if the US sanctions and CA's chose to target certain individuals and institutions in government, that would be a different story. But that's not happening here. Another argument is that politics have no place in science and technology. I don't think that needs to be argued here. Jeff -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CAH8yC8n-EHyfaiXire4ckSRpLbYZ%2B8uFaXHiWL%3DDyM5K8Mh%2Bgg%40mail.gmail.com.
