Post

I searched our own domain in the public certificate transparency logs. Three dev servers and four vendors, named. Nobody scanned us. We published it ourselves by getting SSL certificates. www.certkit.io/blog/somebod... #PKI

certkit.ioSomebody's been keeping a list of your certificatesThere is a permanent public record of every certificate ever issued for your domain. You never agreed to it and you can't opt out. I read ours, and it names our dev servers and most of our vendors.

0 reposts1 like

No replies yet.