mozilla / crlite

WebPKI-level Certificate Revocation via Multi-Level Bloom Filter Cascade
http://www.cs.umd.edu/~dml/papers/crlite_oakland17.pdf
Mozilla Public License 2.0
77 stars 6 forks source link

CT log urls are outdated? #285

Open loosebazooka opened 1 year ago

loosebazooka commented 1 year ago

I'm not sure what this project is, but the urls in here are very out of date

https://github.com/mozilla/crlite/blob/main/go/certificate-transparency-go/submission/server/main.go#L35 https://github.com/mozilla/crlite/blob/main/setup/list_all_active_ct_logs#L3

https://www.gstatic.com/ct/log_list/log_list.json has not been available for months

it is recommended you update to v3 log lists (v1 is turned down and v2 will be turned down soon): https://groups.google.com/a/chromium.org/g/ct-policy/c/zejEtWAJtEA

Update to https://www.gstatic.com/ct/log_list/v3/log_list.json and maybe update your reference to go-certificate-transparency?

NOTE: this is not a resource that is meant to be used directly by applications, and is mostly a part of the Chrome CT implementation, we provided a notification as best we could, but ultimately in a best effort manner (developers using this should have a close relationship with the CT ecosystem, as a minimum, following the ct-policy mailing list very carefully: https://groups.google.com/a/chromium.org/g/ct-policy)