Thanks Rob. The security folks at my employer already found a domain that was set up by some marketing folks that has a less than optimal cert, and the domain appears to be in someone's personal account, and they are no longer with the company. Of course the domain is active.

sigh

tim


On 6/3/15 7:26 AM, Rob Stradling wrote:
https://crt.sh

Pronounced "search".  :-)

It's a web interface that lets you search for certs that have been
logged by the publicly known RFC6962 logs.

Right now it's half a Monitor.  It fetches all new entries soon after
they're added to the logs, but it doesn't (yet) verify STH signatures.

No current plans to release source code.

Feel free to mention this on the wiki page.

On 30/07/14 22:13, Melinda Shore wrote:
During the session last week I was a bit surprised by the number of
people saying that they were doing implementations, and I think it
might be useful to get a better handle on that.  If nothing else, it
helps quite a bit during the publication process if it's known
that there are interoperable implementations and that we know a little
bit about them.

So, I'd be grateful if people who've are working on implementations
and who can discuss them publicly could speak up, let us know the
status and whether or not you'll be releasing source, and provide a
pointer to a repo or other documentation if you're able.  Also let
me know whether or not you'd be willing to have your implementation
mentioned on a wiki page listing implementations.

Thanks again,

Melinda


_______________________________________________
Trans mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/trans

Reply via email to