4 ms·
Hey folks, developer of CertStream here. You can read more about the motivations and implementation behind this project by visiting the announcement page (https
by zer01 9y ago
Hey folks, developer of CertStream here. You can read more about the motivations and implementation behind this project by visiting the announcement page (https://medium.com/cali-dog-security/introducing-certstream-3fc13bb98067 https://medium.com/cali-dog-security/introducing-certstream-...) on my company's blog. I'm also happy to field any questions anyone may have!
- kbody 9y agoInteresting project. I was wondering if you think they are any privacy issues around Certificate Transparency, like grouping ownership of domains through the timings.
- zer01 9y agoHmm, that's an interesting thing I haven't given much thought to. I think that it would be somewhat difficult to pull off a correlation attack/leakage as the CTLs tend to dump in batches vs every poll returning new results, but I think once you remove a lot of the noise (cloudflare SNI certs, testing domains, etc) it'd potentially show some interesting patterns. https://github.com/CaliDog/certstream-python/blob/master/examples/stat_windows.py https://github.com/CaliDog/certstream-python/blob/master/exa... This demo would be a decent starting point to that analysis if you'd be interested in toying with it!
- tty7 9y agoNice work! Congrats How are you dealing with googles 60min-ish flushes of their log?