TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Sunlight: A certificate transparency implementation built for scalability, ease

14 pointsby fanf27 days ago

2 comments

jauntywundrkind7 days ago
Filippo has their own great thread on this work too, highly recommend: <a href="https:&#x2F;&#x2F;bsky.app&#x2F;profile&#x2F;filippo.abyssdomain.expert&#x2F;post&#x2F;3loquchbrpm2m" rel="nofollow">https:&#x2F;&#x2F;bsky.app&#x2F;profile&#x2F;filippo.abyssdomain.expert&#x2F;post&#x2F;3lo...</a><p>It cites an interesting new spec c2sp, <a href="https:&#x2F;&#x2F;c2sp.org&#x2F;static-ct-api" rel="nofollow">https:&#x2F;&#x2F;c2sp.org&#x2F;static-ct-api</a> :<p>&gt; <i>The Static Certificate Transparency API defines a read-path HTTP static asset hierarchy (for monitoring) to be implemented alongside the write-path RFC 6962 endpoints (for submission).</i><p>&gt; <i>Aside from the different read endpoints, a log that implements the Static API is a regular CT log that can work alongside RFC 6962 logs and that fulfills the same purpose. In particular, it requires no modification to submitters and TLS clients.</i><p>Huge huge speed up, making a CT Log that can be read relatively easily from some static files. Versus it sounds like before every query requiring a rather computationally intensive series of lookups.
skybrian7 days ago
Great stuff! I’m wondering whether a similar architecture might work for other systems. Could a bluesky relay work like that?