[{"data":1,"prerenderedAt":354},["ShallowReactive",2],{"project-15622140":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":42,"post_text":43,"what":44,"said":76,"maker_in_thread":148,"shape":158,"grid":161,"attempts":316,"same_week":317,"maker_shows":38,"maker_hidden":346,"reader_version":347,"card":348},"15622140","CertStream","See SSL certs as they're issued in real time","title","Show HN: CertStream – See SSL certs as they're issued in real time","https:\u002F\u002Fcertstream.calidog.io","certstream.calidog.io","zer01",1509742467,2017,142,60,275,2242,13,"notable","security_privacy","certificate transparency monitoring","web_app",[24,25,26,27],"certificate transparency","ssl certificates","certstream","tls monitoring","curious",0.143,{"positive":31,"neutral":32,"mixed":33,"critical":34},3,5,0,2,10,{"design":37,"privacy":39,"execution":40,"idea":41},{"positive":38,"critical":33},1,{"positive":33,"critical":38},{"positive":38,"critical":38},{"positive":38,"critical":33},[33,33,33,33,33,33,33,33,33,31,33,33,33,33,33,33,33,33,33,33,33,33,33,33,33,38,33,33,33,33,33,31,31,33,33,31,32,32,33,38],null,{"problem":45,"audience":43,"pricing":43,"motivation":54,"time_to_build":43,"stack":58,"openness":73,"stage":74,"team_size":75},{"value":46,"source":47,"evidence":48},"Watching SSL certificates issued in real time via Certificate Transparency logs.","maker",[49,51],{"id":50},"post",{"id":52,"by":11,"text":53},"15622777","> I would have to check regularly on CT logs You would indeed, which is part of the reason I released this service + libraries, so some enterprising developer can build a nice…",{"value":55,"source":47,"evidence":56},"Release a service and libraries so developers can build alerting on CT logs.",[57],{"id":52,"by":11,"text":53},[59,65],{"value":60,"source":47,"evidence":61},"Python client library",[62],{"id":63,"by":11,"text":64},"15623078","Hmm, that's an interesting thing I haven't given much thought to. I think that it would be somewhat difficult to pull off a correlation attack\u002Fleakage as the CTLs tend to dump in…",{"value":66,"source":67,"evidence":68},"Go library","commenter",[69],{"id":70,"by":71,"text":72},"15624163","tscs37","This is quite neat. I'll probably look at the go-library to build something out of that. In the meanwhile, crt.sh also offers a Atom feed of issued certificates. Definitely not…","open_source","launched","company",{"praise":77,"objections":97,"requests":108,"questions":113,"alternatives":125},[78,90],{"value":79,"source":67,"evidence":80},"Nice, useful project for monitoring certificates",[81,85,89],{"id":82,"by":83,"text":84},"15623159","tty7","Nice work! Congrats How are you dealing with googles 60min-ish flushes of their log?",{"id":86,"by":87,"text":88},"15623841","wybiral","Very cool! I love the simple JSON-over-WebSockets API and would love to see more streaming APIs like this available in the wild.",{"id":70,"by":71,"text":72},{"value":91,"source":67,"evidence":92},"Clean landing page design",[93],{"id":94,"by":95,"text":96},"15622365","waibelp","Sweet landingpage!",[98],{"value":99,"source":67,"evidence":100},"CT logs expose subdomain names, aiding attackers",[101,105],{"id":102,"by":103,"text":104},"15623239","mschuster91","One thing I totally dislike with CT is that literally everybody can see all the subdomains that my certificate is valid for (esp. LetsEncrypt), but also for cases where your…",{"id":106,"by":103,"text":107},"15624269","> You should not expect a service which has been exposed to the open internet to be hidden. Of course not, but CT dramatically lowers the bar for attackers. That's what I mean.",[109],{"value":110,"source":67,"evidence":111},"Alerting service built on the stream",[112],{"id":52,"by":11,"text":53},[114,118],{"value":115,"source":67,"evidence":116},"How the stream handles Google log flushes every hour or so",[117],{"id":82,"by":83,"text":84},{"value":119,"source":67,"evidence":120},"Privacy risk of correlating domain ownership via timing",[121],{"id":122,"by":123,"text":124},"15622813","kbody","Interesting project. I was wondering if you think they are any privacy issues around Certificate Transparency, like grouping ownership of domains through the timings.",[126,134,141],{"value":127,"source":67,"evidence":128},"crt.sh with RSS\u002FAtom feed",[129,133],{"id":130,"by":131,"text":132},"15623715","gsich","one could also use crt.sh and the RSS feed.",{"id":70,"by":71,"text":72},{"value":135,"source":67,"evidence":136},"CertSpotter",[137],{"id":138,"by":139,"text":140},"15623907","tonyztan","> \"So to be sure nobody issued a cert for one of my properties I would have to check regularly on CT logs to be sure that only certs requested by me are issued.\" CertSpotter does…",{"value":142,"source":67,"evidence":143},"ctadvisor",[144],{"id":145,"by":146,"text":147},"15622905","technion",">so some enterprising developer can build a nice alerting service I launched https:\u002F\u002Fctadvisor.lolware.net\u002F some time ago.",{"comments":149,"answered":31,"key":150},9,[151,154,155],{"id":152,"text":153},"15622668","This is (imo) the most correct response to this query. The idea behind the CT lists is that browsers will flip into a \"if it's no publicly identifiable, it's not valid\" mode. The…",{"id":52,"text":53},{"id":156,"text":157},"15623034","Oh very cool! I hadn't seen this. Good stuff! http:\u002F\u002Fcdn.ebaumsworld.com\u002FmediaFiles\u002Fpicture\u002F718392\u002F84890892.jpg",{"commenters":159,"max_depth":35,"maker_replies":149,"first_comment_mins":33,"lifespan_hours":160},37,38,[162,166,169,171,173,176,179,182,185,188,191,193,195,197,200,202,205,208,211,213,215,217,219,222,224,225,228,231,234,236,238,241,244,247,250,252,255,258,260,262,265,268,270,272,275,279,281,283,284,286,289,291,293,297,299,301,304,307,310,314],[163,33,33,164,165,33],"15622583","other\u002Fneutral\u002Fidea","y0ghur7_xxx",[167,33,33,164,168,33],"15622629","bouk",[152,33,33,170,11,38],"commenter\u002Fneutral\u002Fidea",[172,33,33,164,165,33],"15622692",[174,33,33,170,175,33],"15622745","tomschlick",[177,33,33,170,178,33],"15622765","foota",[180,33,33,170,181,33],"15622868","tomputer",[183,33,33,170,184,33],"15622757","advisedwang",[186,33,33,170,187,33],"15622808","IgorPartola",[189,33,33,170,190,33],"15623381","prdonahue",[52,33,33,192,11,38],"project\u002Fneutral\u002Fidea",[145,33,33,194,146,33],"other\u002Fneutral\u002Fnone",[156,33,33,196,11,38],"commenter\u002Fneutral\u002Fnone",[198,33,31,199,146,33],"15623127","project\u002Fneutral\u002Fdesign",[130,33,31,201,131,33],"project\u002Fneutral\u002Fnone",[203,33,33,170,204,33],"15623008","dlgeek",[206,33,33,164,207,33],"15624396","kuschku",[209,33,33,194,210,33],"15624498","germanier",[212,33,33,194,207,33],"15624509",[214,33,33,196,210,33],"15624520",[216,33,33,194,207,33],"15624531",[218,33,33,196,210,33],"15624563",[220,33,33,170,221,33],"15623084","hannob",[223,33,33,164,190,33],"15623377",[138,33,33,194,139,33],[226,33,33,164,227,33],"15624240","tialaramex",[229,33,33,164,230,33],"15622697","arkadiyt",[232,33,33,164,233,33],"15622904","Matt3o12_",[235,33,33,164,165,33],"15622961",[237,33,33,164,190,33],"15623386",[239,33,33,164,240,33],"15622965","schoen",[242,33,33,164,243,33],"15622979","the8472",[245,33,33,196,246,33],"15622637","merb",[248,33,33,170,249,33],"15622648","vetrom",[251,33,33,170,165,33],"15622725",[253,33,33,164,254,33],"15622663","eledra",[256,33,33,170,257,33],"15624462","usernam",[259,33,33,170,165,33],"15628983",[102,38,38,261,103,33],"project\u002Fcritical\u002Fprivacy",[263,38,33,194,264,33],"15623592","quesera",[266,38,33,194,267,33],"15623867","Operyl",[269,38,33,196,71,33],"15624141",[106,38,33,271,103,33],"commenter\u002Fneutral\u002Fprivacy",[273,38,33,274,71,33],"15624354","commenter\u002Fcritical\u002Fprivacy",[276,38,33,277,278,33],"15625106","commenter\u002Fcritical\u002Fnone","Walkman",[280,34,33,192,11,38],"15622142",[122,34,31,282,123,33],"project\u002Fneutral\u002Fprivacy",[63,34,33,282,11,38],[82,34,31,285,83,33],"project\u002Fneutral\u002Fexecution",[287,31,33,164,288,33],"15622947","andrewstuart2",[290,31,33,194,11,38],"15623060",[292,31,33,164,83,33],"15623151",[294,295,31,285,296,33],"15622467",4,"mastax",[298,295,33,201,11,38],"15622553",[86,32,32,300,87,33],"project\u002Fpositive\u002Fexecution",[70,302,32,303,71,33],6,"project\u002Fpositive\u002Fidea",[94,305,32,306,95,33],7,"project\u002Fpositive\u002Fdesign",[308,305,33,309,11,38],"15622571","maker\u002Fneutral\u002Fdesign",[311,305,38,312,313,33],"15622900","project\u002Fcritical\u002Fexecution","finnn",[315,305,33,285,11,38],"15623068",[],[318,323,327,332,337,342],{"id":319,"name":320,"points":321,"category":322},"15624206","Server.js",295,"languages",{"id":324,"name":325,"points":326,"category":322},"15644430","Javalin 1.0",271,{"id":328,"name":329,"points":330,"category":331},"15645276","Orange Forum",226,"infrastructure",{"id":333,"name":334,"points":335,"category":336},"15611605","Link.fish",201,"web_saas",{"id":338,"name":339,"points":340,"category":341},"15638201","OSX-ISO",135,"dev_tools",{"id":343,"name":344,"points":345,"category":331},"15611265","url-to-pdf",129,false,"v2",{"id":349,"name":5,"line":6,"ai":346,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":350,"top":18,"kw":351,"maker":11,"domain":10,"tier":19,"attempts":33,"strip":352,"url":9,"mix":353,"praise":79,"objection":99,"sub":21},15622140,0.14,[24,25,26,27],"0000000003000000000000000100000330035501",[31,32,33,34],1794036560495]