4 ms·

The “Behind The Sofa” Certificate Transparency Log

58 points by FiloSottile 9y ago

jwilk 9y ago
Can't tell if serious or not.
- FiloSottile 9y ago
  At Up in the Air Ltd we take Merkle trees and user security extremely seriously. If you have any concern please contact support at devnull@filippo.io.
wolf550e 9y ago
Why doesn't Cloudflare run a serious CT log?
- slackingoff2017 9y ago
  If MITM on HTTPS traffic and spewing ram contents into global caches wasn't enough to convince you that cloudflare doesn't care about security, I don't really know what to say.
- FiloSottile 9y ago
  ;)
cdevs 9y ago
I found my moment of zen the second time I read this.
egwynn 9y ago
One might be forgiven for expecting it to make heavy use of CouchDB.
- agwa 9y ago
  Fortunately, Trillian supports pluggable storage backends! https://github.com/google/trillian/tree/master/storage https://github.com/google/trillian/tree/master/storage
xg15 9y ago
I'm missing the potted merkle tree next to it.
ancarda 9y ago
>behindthesofa is only reachable over modern protocols, so insecure HTTP and IPv4 are not supported. Not supporting HTTP seems ok, but what's the reason for not supporting IPv4? My ISP, switch, and OS all support IPv6 but I wasn't able to configure it so even though I want to use IPv6, I wasn't able to ever get it to work. That's now 2 things I can't use; loopsofzen.co.uk and behindthesofa. I really hope this doesn't get more common else I'll essentially get locked out of the Internet. I guess I can always use Google and Facebook. I wrote about my problems with IPv6 here if anyone is interested: https://www.reddit.com/r/ipv6/comments/5q9dog/struggling_with_ipv6/ https://www.reddit.com/r/ipv6/comments/5q9dog/struggling_wit...
- captn3m0 9y ago
  The twitter account has this[0]: >We now offer a legacy (IPv4) mirror of the behindthesofa homepage: https://filippo.io/behindthesofa/ https://filippo.io/behindthesofa/ The actual service is at https://ct.filippo.io/behindthesofa/ https://ct.filippo.io/behindthesofa/ (IPv6 only) [0]: https://twitter.com/_behindthesofa/status/858600027727462400 https://twitter.com/_behindthesofa/status/858600027727462400
- darklajid 9y ago
  Same here. Cannot reach ipv6 from my current (between places) home line even and the local mobile network providers never offered ipv6 integration as far as I can tell (dual sim, different networks, no ipv6 access).
- deleted 9y ago
  [deleted]
- cesarb 9y ago
  > That's now 2 things I can't use; loopsofzen.co.uk and behindthesofa. I really hope this doesn't get more common else I'll essentially get locked out of the Internet. I could reach both https://ct.filippo.io/ https://ct.filippo.io/ and https://loopsofzen.uk/ https://loopsofzen.uk/ over Teredo, so that can be an option even if your ISP or router don't have working IPv6.

58 points by FiloSottile 9y ago

jwilk 9y ago

Can't tell if serious or not.

FiloSottile 9y ago
At Up in the Air Ltd we take Merkle trees and user security extremely seriously. If you have any concern please contact support at devnull@filippo.io.

wolf550e 9y ago

Why doesn't Cloudflare run a serious CT log?

slackingoff2017 9y ago
If MITM on HTTPS traffic and spewing ram contents into global caches wasn't enough to convince you that cloudflare doesn't care about security, I don't really know what to say.
FiloSottile 9y ago
;)

cdevs 9y ago

I found my moment of zen the second time I read this.

egwynn 9y ago

One might be forgiven for expecting it to make heavy use of CouchDB.

agwa 9y ago
Fortunately, Trillian supports pluggable storage backends! https://github.com/google/trillian/tree/master/storage https://github.com/google/trillian/tree/master/storage

xg15 9y ago

I'm missing the potted merkle tree next to it.

ancarda 9y ago

>behindthesofa is only reachable over modern protocols, so insecure HTTP and IPv4 are not supported. Not supporting HTTP seems ok, but what's the reason for not supporting IPv4? My ISP, switch, and OS all support IPv6 but I wasn't able to configure it so even though I want to use IPv6, I wasn't able to ever get it to work. That's now 2 things I can't use; loopsofzen.co.uk and behindthesofa. I really hope this doesn't get more common else I'll essentially get locked out of the Internet. I guess I can always use Google and Facebook. I wrote about my problems with IPv6 here if anyone is interested: https://www.reddit.com/r/ipv6/comments/5q9dog/struggling_with_ipv6/ https://www.reddit.com/r/ipv6/comments/5q9dog/struggling_wit...

captn3m0 9y ago
The twitter account has this[0]: >We now offer a legacy (IPv4) mirror of the behindthesofa homepage: https://filippo.io/behindthesofa/ https://filippo.io/behindthesofa/ The actual service is at https://ct.filippo.io/behindthesofa/ https://ct.filippo.io/behindthesofa/ (IPv6 only) [0]: https://twitter.com/_behindthesofa/status/858600027727462400 https://twitter.com/_behindthesofa/status/858600027727462400
darklajid 9y ago
Same here. Cannot reach ipv6 from my current (between places) home line even and the local mobile network providers never offered ipv6 integration as far as I can tell (dual sim, different networks, no ipv6 access).
deleted 9y ago
[deleted]
cesarb 9y ago
> That's now 2 things I can't use; loopsofzen.co.uk and behindthesofa. I really hope this doesn't get more common else I'll essentially get locked out of the Internet. I could reach both https://ct.filippo.io/ https://ct.filippo.io/ and https://loopsofzen.uk/ https://loopsofzen.uk/ over Teredo, so that can be an option even if your ISP or router don't have working IPv6.