4 ms·

Before the inevitable flood of the super insightful and valuable comments like "hurr durr another google product killed", let me ask: Is there a good alternati

Before the inevitable flood of the super insightful and valuable comments like "hurr durr another google product killed", let me ask: Is there a good alternative frontend for these queries? As far I understand the underlying data is still public and available from many sources, but this was the only easy to use search I know of. Cloudflare sells some services to notify you on changes to your domains, but what about just checking on it manually, or exploring history of other domains?

RL_Quine 5y ago
https://crt.sh/ https://crt.sh/
- politelemon 5y ago
  I didn't even know Google had a CT search. The search results are better presented/more accessible on crt.sh from my one minute of testing.
toomuchtodo 5y ago
Does Let's Encrypt offer a similar functionality for CT queries? Could they if donations were directed to building said functionality?
- chockchocschoir 5y ago
  Certificates generated via Lets Encrypt already end up in the Certificate Transparency log. You can check this yourself via https://crt.sh https://crt.sh
  - toomuchtodo 5y ago
    I am aware of that, but as a non profit providing certificate services, it aligns with their mission (imho) to also provide CT log storage and search functionality imho (not to denigrate crt.sh, which is good tooling, but yet another for profit org [Sectigo.com, formerly Comodo CA] benevolently providing the service for now). Personally, I think it's good to move away from Google, Facebook, and similar providing these core internet services. Throw some money at Let's Encrypt, the Internet Archive, and whomever is going to run Elasticsearch for this corpus, call it a day. The primitives are cheap to do so (compute and storage).
  - est31 5y ago
    FTR, any certificate that wants to be recognized by Chrome ends up there.
tptacek 5y ago
There's a zillion of them, right? crt.sh is maybe the best known, but if you Google you'll find a bunch (for instance Facebook runs one).
- progbits 5y ago
  crt.sh came up but I was getting 5xx errors. Looks like it might be overloaded now, or I picked "expensive" queries. But thanks for the recommendation, I'll try it some time later. Edit: Regarding the facebook one: "Log into Facebook to use this tool." Yeah no thanks.
advisedwang 5y ago
Some altarnatives: * https://crt.sh/ https://crt.sh/ * https://developers.facebook.com/tools/ct https://developers.facebook.com/tools/ct * https://ui.ctsearch.entrust.com/ui/ctsearchui https://ui.ctsearch.entrust.com/ui/ctsearchui
- freedomben 5y ago
  https://ui.ctsearch.entrust.com/ui/ctsearchui https://ui.ctsearch.entrust.com/ui/ctsearchui is the only one I could get to work, but I uMatrix things so it could be my own fault.
- RL_Quine 5y ago
  > Log into Facebook to use this tool. Not sure I'd even list that as a reasonable alternative.
  - cpach 5y ago
    Feel free to not use it.
- technion 5y ago
  I'd just like to chime in with my own alerting service: https://ctadvisor.lolware.net/ https://ctadvisor.lolware.net/ https://github.com/technion/ct_advisor https://github.com/technion/ct_advisor Building this was exciting, I've been proud to run it and and it predated services from Facebook or Cloudflare. I'm not sure what the future should hold however, it's hard to bring it up anywhere without being told people should just use Facebook.
deleted 5y ago
[deleted]

RL_Quine 5y ago

https://crt.sh/ https://crt.sh/

politelemon 5y ago
I didn't even know Google had a CT search. The search results are better presented/more accessible on crt.sh from my one minute of testing.

toomuchtodo 5y ago

Does Let's Encrypt offer a similar functionality for CT queries? Could they if donations were directed to building said functionality?

chockchocschoir 5y ago
Certificates generated via Lets Encrypt already end up in the Certificate Transparency log. You can check this yourself via https://crt.sh https://crt.sh
- toomuchtodo 5y ago
  I am aware of that, but as a non profit providing certificate services, it aligns with their mission (imho) to also provide CT log storage and search functionality imho (not to denigrate crt.sh, which is good tooling, but yet another for profit org [Sectigo.com, formerly Comodo CA] benevolently providing the service for now). Personally, I think it's good to move away from Google, Facebook, and similar providing these core internet services. Throw some money at Let's Encrypt, the Internet Archive, and whomever is going to run Elasticsearch for this corpus, call it a day. The primitives are cheap to do so (compute and storage).
- est31 5y ago
  FTR, any certificate that wants to be recognized by Chrome ends up there.

tptacek 5y ago

There's a zillion of them, right? crt.sh is maybe the best known, but if you Google you'll find a bunch (for instance Facebook runs one).

progbits 5y ago
crt.sh came up but I was getting 5xx errors. Looks like it might be overloaded now, or I picked "expensive" queries. But thanks for the recommendation, I'll try it some time later. Edit: Regarding the facebook one: "Log into Facebook to use this tool." Yeah no thanks.

advisedwang 5y ago

Some altarnatives: * https://crt.sh/ https://crt.sh/ * https://developers.facebook.com/tools/ct https://developers.facebook.com/tools/ct * https://ui.ctsearch.entrust.com/ui/ctsearchui https://ui.ctsearch.entrust.com/ui/ctsearchui

freedomben 5y ago
https://ui.ctsearch.entrust.com/ui/ctsearchui https://ui.ctsearch.entrust.com/ui/ctsearchui is the only one I could get to work, but I uMatrix things so it could be my own fault.
RL_Quine 5y ago
> Log into Facebook to use this tool. Not sure I'd even list that as a reasonable alternative.
- cpach 5y ago
  Feel free to not use it.
technion 5y ago
I'd just like to chime in with my own alerting service: https://ctadvisor.lolware.net/ https://ctadvisor.lolware.net/ https://github.com/technion/ct_advisor https://github.com/technion/ct_advisor Building this was exciting, I've been proud to run it and and it predated services from Facebook or Cloudflare. I'm not sure what the future should hold however, it's hard to bring it up anywhere without being told people should just use Facebook.

deleted 5y ago

[deleted]