Re: [Trans] Tracking implementations

[Tim Wicinski <[e-mail]>]

Thanks Rob.  The security folks at my employer already found a domain 
that was set up by some marketing folks that has a less than optimal 
cert, and the domain appears to be in someone's personal account, and 
they are no longer with the company.  Of course the domain is active.

sigh

tim


On 6/3/15 7:26 AM, Rob Stradling wrote:
> https://crt.sh
>
> Pronounced "search".  :-)
>
> It's a web interface that lets you search for certs that have been
> logged by the publicly known RFC6962 logs.
>
> Right now it's half a Monitor.  It fetches all new entries soon after
> they're added to the logs, but it doesn't (yet) verify STH signatures.
>
> No current plans to release source code.
>
> Feel free to mention this on the wiki page.
>
> On 30/07/14 22:13, Melinda Shore wrote:
>> During the session last week I was a bit surprised by the number of
>> people saying that they were doing implementations, and I think it
>> might be useful to get a better handle on that.  If nothing else, it
>> helps quite a bit during the publication process if it's known
>> that there are interoperable implementations and that we know a little
>> bit about them.
>>
>> So, I'd be grateful if people who've are working on implementations
>> and who can discuss them publicly could speak up, let us know the
>> status and whether or not you'll be releasing source, and provide a
>> pointer to a repo or other documentation if you're able.  Also let
>> me know whether or not you'd be willing to have your implementation
>> mentioned on a wiki page listing implementations.
>>
>> Thanks again,
>>
>> Melinda
>