Zakir Durumeric

Results 104 comments of Zakir Durumeric

RIght now, we don't have near-term plans to add multiple port support to ZMap. We hope that this can eventually be implemented, but a large amount of ZMap is optimized...

I'm going to re-open this issue, if you don't mind. While it's possible to work around thsi issue by running multiple instances, we are working to add multiple port support...

This essentially boils down to duplicate prevention. Right now, we only output IP addresses once, regardless of how many syn-ack packets are received. While it would be fairly easy to...

This came up once in the past #382. I think the consensus is: Yes! We'd love to have them, but we should structure their addition such that they don't make...

I'm certainly not opposed. I think that we should try to write lints such that they can work without the parent when possible, but I see little downside overall, if...

One issue is that this makes testing a specific certificate non-deterministic. We could incidentally mark a certificate as having an `error` because we passed in the wrong parent in during...

I agree with @dadrian points out here, but also note that CAs add the parent to CT, so in many ways we know the issuing certificate that CAs intended to...

That's a good question. I think that might very well introduce a new status similar to NA but for not enough data provided result. Right now the options are: https://github.com/zmap/zlint/blob/fd40f579253ea1ebfb18a585ab5cd8e7dcde61aa/v2/lint/result.go#L27.

My worry for NA is that I don't want folks to think they've had _all_ applicable tests run when that hasn't actually happened. A certificate could be in scope and...

I went through and looked at which lints don't have tests by name. Here is the list that we should investigate: - [ ] lint_generalized_time_does_not_include_seconds.go [no censys] - [ ]...