x-cli / atbtct Goto Github PK

While leaf inputs are validated by building the tree head, comparing it with the STH sha256_root_hash and checking the STH signature, the extra data (certificate chain) integrity is not verified.

The extra data should be checked by verifying the certificate chain signatures and ensuring that the chain can be linked to one of the roots/trust anchors accepted by the log.

Tracker URLs and peer nodes are not URL encoded as they should be in magnet links.

Hi,
It would be interesting to have a publicly available and normalized list of RSS Feeds, in order to have a fully automated scripted client, able to fetch RSS Feeds, even if they are newly created. For now, I only know the following, but as there will be new Logs, we can be pretty confident that there will be new RSS Feeds. Maybe a static file on this Git project with Pull Request with new RSS (from X-Cli.eu or others servers) ?

"https://www.x-cli.eu/ct/torrents/ct.googleapis.com_aviator.rss",
"https://www.x-cli.eu/ct/torrents/ct.googleapis.com_pilot.rss",
"https://www.x-cli.eu/ct/torrents/ct.googleapis.com_rocketeer.rss",
"https://www.x-cli.eu/ct/torrents/ct.googleapis.com_icarus.rss",
"https://www.x-cli.eu/ct/torrents/ct.googleapis.com_skydiver.rss",
"https://www.x-cli.eu/ct/torrents/ct.startssl.com.rss",
"https://www.x-cli.eu/ct/torrents/ctlog.wosign.com.rss",
"https://www.x-cli.eu/ct/torrents/ct.ws.symantec.com.rss",
"https://www.x-cli.eu/ct/torrents/vega.ws.symantec.com.rss",
"https://www.x-cli.eu/ct/torrents/ct1.digicert-ct.com_log.rss",
"https://www.x-cli.eu/ct/torrents/ctlog.api.venafi.com.rss",
"https://www.x-cli.eu/ct/torrents/ctserver.cnnic.cn.rss"

URL format changed "recently": https://groups.google.com/forum/#!topic/certificate-transparency/JJVbtCXtcJ0

To remain compatible with the previous syntax, we need to strip trailing slashes.