backend
backend copied to clipboard
Certificate transparency data as baseline
ooniprobe currently doesn't fetch full cert chains, however if we were to start doing that a good baseline could be the data collected as part of certificate transparency.
This project includes some code to "polinate" CT auditors with domains we care about: https://github.com/SSLMate/ct-honeybee
Moreover, IIRC, it verifies certificates instead of just storing them. Content hidden behind bad certificates is especially interesting :)
cc @bassosimone this is relevant to the TLS certificate fetching work.