Menu

Post image 1
Post image 2
1 / 2
0

Certificate Transparency Logs: How Attackers Map Your Infrastructure Before You Know They're Looking

DEV Community·Regő Botond Ronyecz·24 days ago
#sqbwru93
Reading 0:00
15s threshold

You deleted the staging server. You closed the Jira ticket. You told your team the migration is done. But somewhere out there, a publicly searchable database has been quietly logging every TLS certificate your company has ever issued, including the one for internal-api.yourapp.com you spun up two years ago and forgot about. That database is open to anyone with a browser. Attackers use it every single day. What is Certificate Transparency and why does it exist? Certificate Transparency (CT) is a public, append-only logging system for TLS certificates. It was designed with good intentions: in 2013, Google introduced it after a CA (DigiCert Malaysia) was caught issuing unauthorized certificates for Google's own domains. The idea was to make every certificate publicly auditable so rogue certs could be detected quickly. Today, all major browsers require that certificates be submitted to at least two public CT logs before they're considered trusted.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Read More