6 ms·
Certificate transparency logs are likely the only realistic way, but you could make the same argument against your DNS provider. Trust has to start somewhere.
by nbadg 1y ago
Certificate transparency logs are likely the only realistic way, but you could make the same argument against your DNS provider. Trust has to start somewhere.
Whether or not something like this makes sense to you is probably a question of your personal threat model.
- weddpros 1y agoSeeing how people are worried about third parties issuing certificates, I encourage using a tool to monitor CT Logs. It really makes the fog of war disappear around your certificates. https://crt.sh https://crt.sh for point in time checks, https://sslboard.com https://sslboard.com for comprehensive oversight (disclosure: I'm the founder)