Recent searches
Search options
TIL about Certificate Transparency logs, basically every Let's Encrypt certificate you got shows up there as public information, so your subdomains are also public information.
https://crt.sh/ is a good tool to check that yourself.
crt.shcrt.sh | Certificate SearchFree CT Log Certificate Search Tool from Sectigo (formerly Comodo CA)
Wrote some go code to handle wildcard certs with porkbun: https://b.yuxuan.org/certbot-dns-certbot
La Vita è BearSwitching to wildcard certificates for certbot with PorkbunOver the weekend there was a HN thread ( https://news.ycombinator.com/item?id=37531801 ) discussing about Certificate Transparency logs, which prompted me to toot this ( https://fosstodon.org/@fishy/111075759307415447 ) : While switching to wildcard certificates doesn’t really hide your subdomains, it helps to some degree, so I decided to switch my certs to wildcards.
@fishy This feels pretty significant. You could sure leak information this way
@fishy not if you have wild cards.
