3 ms·
Interesting project. I was wondering if you think they are any privacy issues around Certificate Transparency, like grouping ownership of domains through the ti
by kbody 9y ago
Interesting project. I was wondering if you think they are any privacy issues around Certificate Transparency, like grouping ownership of domains through the timings.
- zer01 9y agoHmm, that's an interesting thing I haven't given much thought to. I think that it would be somewhat difficult to pull off a correlation attack/leakage as the CTLs tend to dump in batches vs every poll returning new results, but I think once you remove a lot of the noise (cloudflare SNI certs, testing domains, etc) it'd potentially show some interesting patterns. https://github.com/CaliDog/certstream-python/blob/master/examples/stat_windows.py https://github.com/CaliDog/certstream-python/blob/master/exa... This demo would be a decent starting point to that analysis if you'd be interested in toying with it!