Static CT Logs - any operational logs using something other than TesseraCT and Sunlight?

40 views
Skip to first unread message

Vasily Suvorov

unread,
Mar 24, 2026, 8:51:30 AM (11 days ago) Mar 24
to certificate-transparency
Hi all,

I've been testing my monitor/auditor implementation for the static CT APIs. So far, most of the "tiled_logs" use either Sunlight or TesseraCT. 

I understand that Cloudflare has an alternative Rust based implementation. However, looking at the 'all_logs_list.json' all of their logs seem to be 'rejected'. 

Would be grateful for any pointers to the 'qualified' and/or 'usable' logs using something other than TesseraCT or Sunlight!

Best regards,
Vasily

Luke Valenta

unread,
Mar 24, 2026, 9:14:44 AM (11 days ago) Mar 24
to certificate-transparency
HI Vasily,

The current Raio log shards are fine to continue to use for testing --- please do test and report any issues you find.

The Raio log shards have encountered some intermittent availability issues that we haven't gotten to the bottom of yet, which is why the Chrome team decided to transition the logs to Rejected for the time being to avoid alert fatigue (see https://issues.chromium.org/issues/434895698#comment25 for more details).

We're in the process of adding better monitoring/metrics and transitioning the logs to a new internal team at Cloudflare for long-term maintenance. Once we feel confident in the setup and our ability to proactively detect and address issues in our logs, we will be resubmitting a new set of log shards for inclusion in client CT programs.

Best,
Luke

Vasiliy Suvorov

unread,
Mar 24, 2026, 10:27:12 AM (11 days ago) Mar 24
to certificate-...@googlegroups.com
Hi Luke,

Thanks a lot! I've added the 'Raio2026h1a' to the monitoring roster and it's quite a busy one, nice! I'm seeing ~ 20 - 30 new entities per second there. So on par with the Gouda.

I'll report back, should any issues arise.

Best regards,
Vasily

--
You received this message because you are subscribed to the Google Groups "certificate-transparency" group.
To unsubscribe from this group and stop receiving emails from it, send an email to certificate-transp...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/certificate-transparency/570b6b90-0a68-4147-8f80-243144e41105n%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages