ACME Renewal Information
An ACME extension that lets CAs tell clients when to renew certificates early.
OtherSecurity & privacyacmecertificatestls
Recommended in 1 thread
Go will reject certificate chains containing eight distrusted SPKIsgithub.com ·
It lets certificates be replaced automatically when a CA is distrusted.
Similar tools
- Certificate Transparency ↗Security & privacy1 thread
A public logging framework that records issued TLS certificates so misissuance can be detected.
- OneCRL ↗Security & privacy1 thread
Mozilla's centrally pushed list of revoked intermediate certificates for Firefox.
- DANE Security & privacy1 thread
A protocol for binding TLS certificates to domains via DNSSEC-signed DNS records.
- WebPKI Observatory ↗Security & privacy1 thread
A website tracking data about the Web PKI and certificate authorities.
- 1 thread
- ctlogs.dev ↗Security & privacy1 thread
A search service for certificates recorded in Certificate Transparency logs.
- 1 thread
- Convergence ↗Security & privacy2 threads
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
Also in Security & privacy
- 2 threads
- 2 threads
- Convergence ↗2 threads
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
- Ente Photos2 threads
An end-to-end encrypted photo storage service.
- Lockdown Mode ↗2 threads
An optional iOS hardening mode that restricts attachments, web features and connections.
- Paranoid Crypto ↗2 threads
Google's open-source library for detecting weaknesses in cryptographic keys and signatures.
- 2 threads
- Tor2 threads
An anonymity network that routes traffic through volunteer relays.
- YubiKey2 threads
A hardware security key supporting FIDO2, PIV and OpenPGP.
- 1Password ↗1 thread
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
- AWS WAF1 thread
Amazon's managed web application firewall service.
- AWS-LC1 thread
AWS's general-purpose cryptographic library derived from BoringSSL.