On Mon, Oct 23, 2023 at 10:04:25PM -0400, Ian Kelling via mailop wrote:
> Philip Paeps via mailop <[email protected]> writes:
> > On 2023-10-22 14:34:39 (+0530), Slavko via mailop wrote:
> > Indeed: not directly related to mailops.  But a very instructive example
> > of why monitoring C-T logs is a good idea.
> 
> Anyone know how to monitor C-T logs? I looked around a bit and didn't
> see how to actually do it for let's encrypt certs.

You *can* do it yourself, by scraping CT logs and looking for certs of
interest, but most people won't want to go to that level of hassle, and
instead will use an existing hosted service.  A search for "certificate
transparency monitoring service" will turn up quite a few, there's also a
list of services that's maintained at
https://certificate.transparency.dev/monitors/.

(If you do want to scrape CT logs yourself, I highly recommend
https://github.com/mpalmer/scrape-ct-log, but then I'm somewhat biased)

- Matt

_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to