4 ms·
"Nobody"? Google monitors for their domains. So does Facebook. I'll bet a lot of other high value sites are monitoring too but haven't said so publicly. As
by agwa 10y ago
"Nobody"? Google monitors for their domains. So does Facebook. I'll bet a lot of other high value sites are monitoring too but haven't said so publicly.
As for everyone else, give it some time. The ecosystem is still very young and we're still developing tooling.
- criddell 10y agoI'm happy that Google and Facebook are discovering fraudulent certs. When they pop up, hopefully those companies aren't prevented from going public with the information. Are there any end-user tools? When I open twitter.com, I would love for my browser (or my phone if I'm using an app) to tell me that the certificate fingerprint has changed unexpectedly since the last time I visited.
- mynewtb 10y agoThere is certificate patrol or something like that. It is very verbose and will annoy you.
- schoen 10y agoIf you don't mind the risk of false positives (detecting changes that are legitimate), you can get that information from https://addons.mozilla.org/en-US/firefox/addon/certificate-patrol/ https://addons.mozilla.org/en-US/firefox/addon/certificate-p...