4 ms·
On the subject of bothering to look, I built this service to answer that: https://ctadvisor.lolware.net https://ctadvisor.lolware.net
by technion 10y ago
On the subject of bothering to look, I built this service to answer that: https://ctadvisor.lolware.net https://ctadvisor.lolware.net
- criddell 10y agoVery cool. Do you know if Lets Encrypt is monitoring on behalf of their users? It seems like that should be part of the job. Why are all these tamper detection tools targeted to domain owners rather than end users?
- technion 10y agoI don't really see how Lets Encrypt could monitor on behalf of their users. If a CT log shows <randomCA> created a certificate for my domain, I know it's unauthorised for the reason that I did not choose to authorise it. Lets Encrypt cannot assume they are the only company that I deal with.
- criddell 10y agooh yeah, that's a good point. I didn't think that one through.