Automatic checks against certificate transparency


#1

We want to create a tool / plugin for certbot, that would automatically check a certificate transparency (CT) database and email a summary to contact emails, or even send alerts when the check discovers suspicious certificates.

Would it be of any interest? Or maybe it already exists?


#2

Hi @DanCvrcek,

You might be interested in SSLMate’s “Certspotter” which can do similar CT validation alerts: https://github.com/SSLMate/certspotter


#3

Hmm, thanks Daniel (@cpu), looks like a good starting point! And it seems to have raised some interest as well.


#4

#5

I can’t see any API specs for the second. Is there any?

Thanks Tom


#6

@DanCvrcek I’m not aware of an API.

Another web service: https://suricat.io


#7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.