In Log We Trust: Revealing Poor Security Practices with Certificate Transparency Logs and Internet Measurements

The data resulted from Internet connections to HTTPS servers, where we captured their behavior and configuration parameters such as certificates. The connection to HTTPS servers was established using the ZMapv6 (https://github.com/tumi8/zmap) and goscanner (https://github.com/tumi8/goscanner). As an additional source certificates from Certificate Transparency Logs were downloaded using certificate-transparency-go (https://github.com/tumi8/certificate-transparency-go). For analysis purposes the certificates were fed into cablint (https://github.com/tumi8/certlint) which evaluated them for specific quality criteria (Baseline Requirements).     «

The data resulted from Internet connections to HTTPS servers, where we captured their behavior and configuration parameters such as certificates. The connection to HTTPS servers was established using the ZMapv6 (https://github.com/tumi8/zmap) and goscanner (https://github.com/tumi8/goscanner). As an additional source certificates from Certificate Transparency Logs were downloaded using certificate-transparency-go (https://github.com/tumi8/certificate-transparency-go). For analysis purposes the c...     »