Dave

Results 56 issues of Dave

We currently duplicate a lot of information storing the certificate fingerprint inside the observations table. We should move our data back to Third Normal Form and move cert info into...

We should add HTTP Cache-Control headers when we server requests, so that clients will cache and re-use content. This will both help clients get the results more quickly (because they'll...

Enhancement

The original Perspectives paper includes the feature of validity checks and data redundancy to "[limit] the power of a compromised or otherwise malicious notary server"[1]. In this setup, each notary...

Enhancement

CherryPy currently has an error if the service_id contains unicode, such as 'Bücher.de'. File "C:\Python27\lib\site-packages\cherrypy_cprequest.py", line 656, in resp ond response.body = self.handler() File "C:\Python27\lib\site-packages\cherrypy\lib\encoding.py", line 188, in __ call__...

Bug

When a website legitimately updates its certificate it normally has to wait for the notary's scheduled scanning process to run before information is updated. This is not ideal as it...

Enhancement

Automatically blacklisting sites that fail repeated scans may have security implications. But perhaps there are other things we could do to speed up scan times? - Use a ThreadPool instead...

Enhancement

SSL Labs' ["TLS Deployment Best Practises" doc](https://www.ssllabs.com/projects/best-practices/) suggests using a minimum of 2048 bit RSA keys, or ECDSA keys for longer lengths. We should increase notary key sizes. This will...

security bug

We should add a switch to allow notaries to use openssl for on-demand scans in addition to using the built-in python scanner. This should be as simple as importing a...

Enhancement

Currently the notary reply does not contain the host name. We should include it so clients can verify that the fingerprint returned is indeed for the host they expected. Using...

security bug

Some hosting services monitor their tenants' activity for things like communicating with known malware or phishing sites. Currently, because Perspectives queries any service (site) that a user visits these queries...

Enhancement