5 ms·
It's all TLS certs, because they show up in the Transparency Log[1] You can watch a live stream of it here: https://bencevans.io/security/certificate-stream ht
by mmh0000 1mo ago
It's all TLS certs, because they show up in the Transparency Log[1]
You can watch a live stream of it here: https://bencevans.io/security/certificate-stream https://bencevans.io/security/certificate-stream
[1] https://en.wikipedia.org/wiki/Certificate_Transparency https://en.wikipedia.org/wiki/Certificate_Transparency
- doubled112 1mo agoI use subdomains and a wildcard cert to partly obfuscate this.
- RulerOf 1mo agoI do the same, but I switched from cert-per-subdomain a couple of years ago. They're either using Passive DNS logs or a historical dataset.
- unethical_ban 1mo agoWhen I stood up some sites last year, I used codenames for the subdomains thinking I was obfuscating a little. I didn't know about the transparency logs until months later.
- martyvis 1mo agoTIL about Certificate Transparency (they didn't teach that in security school)