Certificate Transparency
A system of public, append-only logs of issued certificates (RFC 6962), so domain owners can detect certificates issued for their names without their knowledge. Chrome and Safari require signed certificate timestamps from these logs for publicly trusted TLS certificates.
- Defined in
- RFC 6962
Covered in
Guide
Operate TLS and certificates: configuration, renewal and verification
Configure a modern TLS profile with hybrid post-quantum key exchange, automate renewal for certificate lifetimes that fall to 47 days, and verify every termination point with a fresh handshake.
Guide
Prevent subdomain takeover from dangling DNS records
A DNS record that outlives its cloud resource lets whoever claims the name serve content on your domain. Bind records to resources in IaC, remove the record first, verify domains and scan for dangling records.