-
An [IDN](https://en.wikipedia.org/wiki/Internationalized_domain_name) subdomain with a cert would be useful for testing.
In searching the web I've been unable to find an example of an IDN cert. Let's…
-
The Profiles ballot updates [Section 7.1.2.9](https://github.com/cabforum/servercert/blob/profiles/docs/BR.md#7129-precertificate-profile) to say:
> Once a Precertificate is signed, relying parties…
-
Goal: Automate the signing of RPM and APT repos by having a tool that reads the audit logs and publishes signatures.
Many projects publish RPM and APT repos and as part of that process must have a …
-
# 🧭 Exploratory Testing Charter: Examiner - Application Review, LTSA Information, and Approval Process
### 🎯 Purpose
Explore the **Examiner’s functionality** to:
1. **Review applications in read-only…
-
Hey team.
Suppose a short-lived certificate is issued.
The certificate and key are compromised and the attacker issued a new certificate using the old one:
`step ca renew compromised.crt compromi…
-
Should the API provide the response from each vantage point / perspective back to the client? Or should it provide a single overall result without exposing the results of individual perspectives?
-
**Description**
The [documented](https://docs.sigstore.dev/cosign/verify/#local-verifications) x509 certificate verification isn't working as expected. This is broken in two different ways at HEAD …
-
**What steps did you take and what happened:**
Not willing to use contour CRDs.
Using the same `networking.k8s.io/v1` Ingress resources that worked with nginx-ingress. Expected them to work with c…
-
### Which domain(s) should be blocked?
*.monitoring.immich.cloud
vmetrics.immich.cloud
### Why should these domain(s) be blocked?
#### URL 1
monitoring for immich and maybe more things late…
-
Hi team,
Google has announced that they will turn down the v2 version of log listing by 7th June 2023, we want to upgrade the apps before that.
Here is the conversation link.
https://groups.go…