cisagov / cisagov/pshtt

Idea: Validate Certificate Transparency Logs

Open
#212 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
693
Forks
91
PR merge metrics
No merged PRs in 30d

Description

# 🚀 Feature Proposal

Verify Certificate Transparency Logging on a given website

## Motivation

Compliance with agency security directives

## Example

Boolean yes/no check on whether Certificate Transparency Logs are in two places

## Pitch

My agency relies on this tool for compliance checks of public-facing websites

Contributor guide

Open the contributing guide

Research direction

Start by reviewing how pshtt currently scans a given website and clarify which Certificate Transparency sources count as the required two places. Define the boolean result and expected behavior for missing or conflicting log data. Done means the tool can report a clear yes/no compliance check for a public-facing website.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.