distrust github.com ↗
A tool to distrust all but the 30 most essential CAs on Linux and Windows.
ToolSecurity & privacycertificatespki
Recommended in 1 thread
Apple's git still trusts the compromised eMudhra certificatesemudhra.we-have-a-problem.com ·
Shrinks the trusted CA surface after the eMudhra incident.
Similar tools
- Certificate Transparency ↗Security & privacy1 thread
A public logging framework that records issued TLS certificates so misissuance can be detected.
- Privacy Guides ↗Security & privacy1 thread
A community website recommending privacy tools, including VPN providers.
- WebPKI Observatory ↗Security & privacy1 thread
A website tracking data about the Web PKI and certificate authorities.
- OneCRL ↗Security & privacy1 thread
Mozilla's centrally pushed list of revoked intermediate certificates for Firefox.
- 1 thread
- 1 thread
- AppArmor Security & privacy1 thread
A Linux kernel security module that confines programs with per-application profiles.
- 1 thread
Also in Security & privacy
- Tor3 threads
An anonymity network that routes traffic through volunteer relays.
- 1Password ↗2 threads
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
- 2 threads
- 2 threads
- Convergence ↗2 threads
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
- Ente Photos2 threads
An end-to-end encrypted photo storage service.
- Lockdown Mode ↗2 threads
An optional iOS hardening mode that restricts attachments, web features and connections.
- Paranoid Crypto ↗2 threads
Google's open-source library for detecting weaknesses in cryptographic keys and signatures.
- 2 threads
- YubiKey2 threads
A hardware security key supporting FIDO2, PIV and OpenPGP.
- ACME Renewal Information1 thread
An ACME extension that lets CAs tell clients when to renew certificates early.
- AWS WAF1 thread
Amazon's managed web application firewall service.
Link from a commenter, not checked or endorsed by us: ↗ https://github.com/hyperreality/distrust