Introducing Certificate Transparency and Nimbus
Mar 23, 2018Nick Sullivan
Summary
This post introduces Cloudflare's support for Certificate Transparency (CT) by launching Nimbus, a free public CT log, and Merkle Town, a dashboard for exploring the CT ecosystem. It explains the importance of CT in improving online security by making certificate issuance accountable, addressing the risks of mis-issued certificates due to Certificate Authority (CA) misbehavior or breaches, and detailing the roles of log operators, auditors, and monitors within the CT ecosystem. The post also outlines how CT is integrated into the web PKI, including the use of Signed Certificate Timestamps (SCTs) and browser requirements for CT qualification.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack