3 ms·
Can you check with dns for new entries and check 443 for a couple weeks to see if there’s a tls cert there?
by prepend 4y ago
Can you check with dns for new entries and check 443 for a couple weeks to see if there’s a tls cert there?
- deathanatos 4y agoYou can't enumerate DNS entries. (And not even privately: some of our (DNS) entries are wildcards, CNAMEs, etc. all make that hard.) We do (now) follow the CT logs for ourselves. That catches some cases, but not everything.
- prepend 4y agoWhy not? I can just check the zone file and go through line by line, right? The wildcards would be tough but you could follow cnames as those would need to be in the cert as is.