Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create a prototype script to create CRLite "list"/file for shavar to serve #52

Open
groovecoder opened this issue Feb 2, 2018 · 0 comments

Comments

@groovecoder
Copy link
Contributor

CRLite is:

a system for proactively pushing all TLS certificate revocations to clients on a regular basis using efficient, compressed data structures

- CRLite Implementors Guide
(Full research paper)

As part of Firefox's implementation, we need:

Server-side code to scrape CT, CRLs and produce bloom filters
Create or update a service to distribute CRLite state to users
Get the bloom filter update service running automatically by infrastructure folks

- Firefox Product Requirements Document

Since shavar aligns closely with these requirements already ... we will create a prototype shavar-list-creation script to scrape CT, CRLs, and produce bloom filters. There are some pre-existing scripts for inspiration:

Ideally, this script can run right alongside lists2safebrowsing.py as a Jenkins job that uploads the resulting file(s) to S3 for shavar to distribute.

I'm sure there will be some implementation changes & challenges, but we'll start with this first best effort.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant