3 ms·
This will get interesting for many CT transparency monitors which for many are already seeing scalability issues. I am operating https://www.merklemap.com/ htt
by Eikon 2y ago
This will get interesting for many CT transparency monitors which for many are already seeing scalability issues.
I am operating https://www.merklemap.com/ https://www.merklemap.com/ and the current scale is already impressive.
- sebmellen 2y agoWhat a cool site. For a long time I've been looking for something exactly like this for discovery purposes.
- Eikon 2y agoThank you!
- mholt 2y agoI don't know much about CT requirements, but can't they prune data out of their logs after some time? Since the certs only last 6 days, the growth of the logs can be capped at some point right? If not now, provisions for such operations could surely be implemented, I imagine. PS. Neat site!
- Eikon 2y ago> I don't know much about CT requirements, but can't they prune data out of their logs after some time? Since the certs only last 6 days, the growth of the logs can be capped at some point right? That's what happens - logs are "expired" after a few years. But if you want to have an exhaustive monitor, you probably don't want to discard the records of expired certificates. > PS. Neat site! Thank you!
- o11c 2y agoHmm, I wonder if it's possible to do dedicated intermediate certificates that promise to only sign short-lived certificates for a single site? That way the CT-log could be taught to only keep the intermediate?
- deleted 2y ago[deleted]