Convergence en.wikipedia.org ↗

Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.

ToolSecurity & privacytlspkitrust-agilitynotaries

Recommended in 2 threads

eMudhra to exit global SSL/TLS certificate business
emudhra.com · 4 days ago
Gives clients rather than servers a say in who they trust.
Go will reject certificate chains containing eight distrusted SPKIs
github.com · 6 days ago
It was suggested as a way to avoid single points of CA failure.

Certificate Transparency ↗Security & privacy
A public logging framework that records issued TLS certificates so misissuance can be detected.
1 thread
CRLite ↗Security & privacy
Firefox's compressed, privacy-preserving system for checking whether leaf certificates have been revoked.
1 thread
ctlogs.dev ↗Security & privacy
A search service for certificates recorded in Certificate Transparency logs.
1 thread
keys-on-the-wire ↗Security & privacy
Proxy that injects real API keys into outbound requests so apps only ever see placeholder tokens.
1 thread
OneCRL ↗Security & privacy
Mozilla's centrally pushed list of revoked intermediate certificates for Firefox.
1 thread
DANE Security & privacy
A protocol for binding TLS certificates to domains via DNSSEC-signed DNS records.
1 thread
AWS-LC Security & privacy
AWS's general-purpose cryptographic library derived from BoringSSL.
1 thread
Let's Encrypt Security & privacy
A free, nonprofit certificate authority.
1 thread

Canarytokens ↗
Free service for planting tripwire tokens that alert you when they are accessed.
2 threads
Cloudflare WAF ↗
Cloudflare's managed web application firewall.
2 threads
Ente Photos
An end-to-end encrypted photo storage service.
2 threads
Lockdown Mode ↗
An optional iOS hardening mode that restricts attachments, web features and connections.
2 threads
Paranoid Crypto ↗
Google's open-source library for detecting weaknesses in cryptographic keys and signatures.
2 threads
SELinux ↗
A Linux kernel security module for mandatory access control.
2 threads
Tor
An anonymity network that routes traffic through volunteer relays.
2 threads
YubiKey
A hardware security key supporting FIDO2, PIV and OpenPGP.
2 threads
1Password ↗
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
1 thread
ACME Renewal Information
An ACME extension that lets CAs tell clients when to renew certificates early.
1 thread
AWS WAF
Amazon's managed web application firewall service.
1 thread
AWS-LC
AWS's general-purpose cryptographic library derived from BoringSSL.
1 thread

Link from a commenter, not checked or endorsed by us: ↗ https://en.wikipedia.org/wiki/Convergence_(SSL)