4 ms·
I would claim that I'm quite familiar with the TLS and certificate ecosystem, and up until this news item I didn't know Google runs a CT search engine. Everyon
by hannob 5y ago
I would claim that I'm quite familiar with the TLS and certificate ecosystem, and up until this news item I didn't know Google runs a CT search engine.
Everyone uses either crt.sh or to a lesser extend Censys. I think this space is covered well and there's just no need for a Google-operated CT search engine nobody knows about.
- bikingbismuth 5y agoI am in the same boat. I built a CT Log scraping system back in 2016 and once storage got too expensive I migrated the solution to the Censys API. Our use case is finding phishing sites targeting our customers, CT Logs have been amazing for detecting campaigns early.
- tialaramex 5y agoI think I would claim to be similarly familiar :) but I did know Google operated this search and I've even used it in the past when Rob's site was down. As I think I expressed in a post last year it's important that we could migrate off crt.sh but it isn't a problem if we never do. One thing I don't like but can't attest to still being a problem since maintaining one is no longer my job, is some logs are (were) unreliable for a crawler, which is a problem if you wanted to spin up an alternative to crt.sh. Google checks things work for them as part of qualification, but that's at best a 90% solution
- fomine3 5y agoAlso not that crt.sh is operated by Sectigo (formerly Comodo). Previously they had not good reputation.