3 ms·
Certificates generated via Lets Encrypt already end up in the Certificate Transparency log. You can check this yourself via https://crt.sh https://crt.sh
by chockchocschoir 5y ago
Certificates generated via Lets Encrypt already end up in the Certificate Transparency log. You can check this yourself via https://crt.sh https://crt.sh
- toomuchtodo 5y agoI am aware of that, but as a non profit providing certificate services, it aligns with their mission (imho) to also provide CT log storage and search functionality imho (not to denigrate crt.sh, which is good tooling, but yet another for profit org [Sectigo.com, formerly Comodo CA] benevolently providing the service for now). Personally, I think it's good to move away from Google, Facebook, and similar providing these core internet services. Throw some money at Let's Encrypt, the Internet Archive, and whomever is going to run Elasticsearch for this corpus, call it a day. The primitives are cheap to do so (compute and storage).
- est31 5y agoFTR, any certificate that wants to be recognized by Chrome ends up there.