A next-generation Certificate Transparency log built on Cloudflare Workers
Apr 11, 2025Luke Valenta
Summary
This post introduces a next-generation Certificate Transparency (CT) log built on Cloudflare Workers, leveraging the new static CT API design. It details the history and importance of CT, the challenges in operating existing CT logs (integrity, availability, cost), and how the new design, implemented in Rust and deployable on Cloudflare's Developer Platform, addresses these issues by making CT logs more efficient, cacheable, and easier to operate. This represents an advancement in Cloudflare's contribution to internet security infrastructure.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack