Collected research
Discovering Domains via a Time-Correlation Attack on Certificate Transparency
Servers that auto-renew TLS certificates issue them for all their domains at the same moment, so certificates whose validity timestamps fall within seconds of each other in Certificate Transparency logs likely belong to one operator. Searching CT logs by time, or by adjacent log position where the CA zeroes the time, uncovers hidden related domains.
Record
- Researcher
- Arseniy Sharoglazov and @_mohemiv
- Published by
- PT SWARM
- Topic
- Browser
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Arseniy Sharoglazov and @_mohemiv, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .