Certificate Issuance Notifications?

[Lester Waters]

One gap in the proposal is a standardized notification system when a certificate is issued. Obviously, one could pay for a service to monitor for certificate issuing and/or to access the various certificate registries which are unlikely to be free, except for the verification that a specific certificate is listed (or possibly revoked). Ideally, the issuer (by way of convention) sends a (digitally signed?) email notification to a well-known email address at the primary domain for which the certificate is issued (e.g., certificate-notices@domain).  It would be a one-time email courtesy of the issuing Certificate Authority.  Just a thought.

[Josh Small]

On Monday, January 23, 2017 at 6:48:51 AM UTC+11, Lester Waters wrote:

which are unlikely to be free,

The SSL Certificate Issuance Monitoring service (first Google hit for that phrase) I launched a while back is and always will be free. The competing tool just launched by Facebook is also as far as I'm aware free.

[Jeremy Rowley]

Digicert also has a monitoring service. You have to sign up for an account, but the sign up is free. I suspect most monitoring services will be run by cas and will likely be fee.

--
You received this message because you are subscribed to the Google Groups "certificate-transparency" group.
To unsubscribe from this group and stop receiving emails from it, send an email to certificate-transp...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Rob Stradling]

Ditto for CertSpotter (free email notifications for up to 5 domains -
https://sslmate.com/certspotter/pricing).

Ditto for crt.sh (free Atom feeds for any crt.sh query).

> <mailto:certificate-transp...@googlegroups.com>.

> For more options, visit https://groups.google.com/d/optout.
>

> --
> You received this message because you are subscribed to the Google
> Groups "certificate-transparency" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to certificate-transp...@googlegroups.com

> <mailto:certificate-transp...@googlegroups.com>.

> For more options, visit https://groups.google.com/d/optout.

--
Rob Stradling
Senior Research & Development Scientist
COMODO - Creating Trust Online