<![CDATA[given the general, shall we say, unreliability of crt.sh, I've been considering doing our own CT monitor at the @mpiinf]]>given the general, shall we say, unreliability of crt.sh, I've been considering doing our own CT monitor at the @mpiinf

so, dearest security research community, what would you like to see in a CT monitor?

pls boost!

]]>https://board.circlewithadot.net/topic/07950bd2-2e29-4d14-b78c-f82bdb076b99/given-the-general-shall-we-say-unreliability-of-crt.sh-i-ve-been-considering-doing-our-own-ct-monitor-at-the-@mpiinfRSS for NodeFri, 05 Jun 2026 19:06:41 GMTThu, 21 May 2026 08:50:28 GMT60<![CDATA[Reply to given the general, shall we say, unreliability of crt.sh, I've been considering doing our own CT monitor at the @mpiinf on Thu, 21 May 2026 10:03:02 GMT]]>@q @mpiinf I loved the versatility of them literally just having an open read-only Postgres, but not so much the fact where any random user just pull the IPs of everyone connected to it

so really just a versatile way to query things

]]>https://board.circlewithadot.net/post/https://frogs.lgbt/users/alyx/statuses/116611991649084714https://board.circlewithadot.net/post/https://frogs.lgbt/users/alyx/statuses/116611991649084714Thu, 21 May 2026 10:03:02 GMT<![CDATA[Reply to given the general, shall we say, unreliability of crt.sh, I've been considering doing our own CT monitor at the @mpiinf on Thu, 21 May 2026 09:53:01 GMT]]>@domi @q @mpiinf I'd go further: especially if you have implemented CAA records, that happening would already be a huge controversy. To prevent alert fatigue you should be getting emails only when you get a cert you have not requested yourself. But with an API, anything is possible at zombo Com Transparency

]]>https://board.circlewithadot.net/post/https://hsnl.social/users/eloy/statuses/116611952250381771https://board.circlewithadot.net/post/https://hsnl.social/users/eloy/statuses/116611952250381771Thu, 21 May 2026 09:53:01 GMT<![CDATA[Reply to given the general, shall we say, unreliability of crt.sh, I've been considering doing our own CT monitor at the @mpiinf on Thu, 21 May 2026 09:36:09 GMT]]>@q@glauca.space @mpiinf@wisskomm.social after some pondering: opt-in e-mail notifs that someone generated a cert for your domain with a different CA/chain than usual would be nice. alternatively, an API which could be used to implement the same thing on my side

]]>https://board.circlewithadot.net/post/https://donotsta.re/objects/989ec29a-17f4-4b89-a921-f2aaf56feeefhttps://board.circlewithadot.net/post/https://donotsta.re/objects/989ec29a-17f4-4b89-a921-f2aaf56feeefThu, 21 May 2026 09:36:09 GMT<![CDATA[Reply to given the general, shall we say, unreliability of crt.sh, I've been considering doing our own CT monitor at the @mpiinf on Thu, 21 May 2026 09:33:02 GMT]]>@domi @mpiinf not crashing all the time is top of the list

]]>https://board.circlewithadot.net/post/https://glauca.space/users/q/statuses/116611873689585437https://board.circlewithadot.net/post/https://glauca.space/users/q/statuses/116611873689585437Thu, 21 May 2026 09:33:02 GMT<![CDATA[Reply to given the general, shall we say, unreliability of crt.sh, I've been considering doing our own CT monitor at the @mpiinf on Thu, 21 May 2026 09:27:20 GMT]]>@q RSS feeds that at least sometimes actually return data

]]>https://board.circlewithadot.net/post/https://woof.tech/ap/users/116041759041160596/statuses/116611851229972513https://board.circlewithadot.net/post/https://woof.tech/ap/users/116041759041160596/statuses/116611851229972513Thu, 21 May 2026 09:27:20 GMT<![CDATA[Reply to given the general, shall we say, unreliability of crt.sh, I've been considering doing our own CT monitor at the @mpiinf on Thu, 21 May 2026 09:11:48 GMT]]>@q notifications (webhook) for new certificate issuances for a given domain/wildcard would be good for monitoring

]]>https://board.circlewithadot.net/post/https://social.hackerspace.pl/users/radex/statuses/116611790168337468https://board.circlewithadot.net/post/https://social.hackerspace.pl/users/radex/statuses/116611790168337468Thu, 21 May 2026 09:11:48 GMT<![CDATA[Reply to given the general, shall we say, unreliability of crt.sh, I've been considering doing our own CT monitor at the @mpiinf on Thu, 21 May 2026 09:06:41 GMT]]>@q@glauca.space @mpiinf@wisskomm.social search that doesn't time out 3/4 of the time? 😄

i have relatively few requirements, this would be really useful if it materializes

]]>https://board.circlewithadot.net/post/https://donotsta.re/objects/c28bb368-70b7-46c8-b578-2e39cfb58affhttps://board.circlewithadot.net/post/https://donotsta.re/objects/c28bb368-70b7-46c8-b578-2e39cfb58affThu, 21 May 2026 09:06:41 GMT