[SSL Observatory] Does the Obs. provide cert validation through HTTP uploads?

Chris Palmer chris at eff.org
Wed Mar 23 09:12:08 PDT 2011


On 03/23/2011 09:08 AM, Erik Hjelmvik wrote:

> Is there any way I can upload a cert (in the .cer) format to the SSL
> Observatory to see if the cert I've received is the same one as other
> people get. I.e. in order to verify that I'm not being MITM:ed by

Not right now.

We are working on a decentralized Observatory that will let you submit
certificates to our server. However, it is intended as a research data
gathering system, and its primary purpose is not to provide real-time
MITM defense. We hope it will help people discover post facto, but it's
a research system and not a defense mechanism. Of course, the subject of
our research is potential techniques for defense...

The closest thing to what you want is Perspectives, but that also does
not really provide true real-time MITM defense. Maybe someday it will,
or something like it will.


-- 
Chris Palmer
Technology Director, Electronic Frontier Foundation
https://www.eff.org/code



More information about the Observatory mailing list