Live data from Hacker News

Show HN: Snitch.io – SSL auditing and alerting

snitch.io

11–20 of 49 posts

Re: Show HN: Snitch.io – SSL auditing and alerting

#11

You do more than that but really the CA should handle alerts about expiring certificates. They have full knowledge of all certificates, and contact to the responsible party.

true but then you need to actually renew it amd then install it....too many times tickets are filed but get put at the bottom of this list until last minute, or worse a customer reports the nasty browser security warning page

though i do wonder if "this is a feature, not a company"?

Re: Show HN: Snitch.io – SSL auditing and alerting

#14

I think you're trying to solve a non-problem since the company that sells the certificates warns you (sometimes even more than those intervals), afterall, they want you to renew as well. As for checking for quality, that should be the sys admin task or the webmaster. good luck though!

Perhaps a non-problem for startups, but it's definitely a problem for bigger companies where the group that purchases certs may not be the one using them...

I would think that bigger companies would use dedicated IT staff over a start-up for something crucial like SSL cert checking.

Re: Show HN: Snitch.io – SSL auditing and alerting

#16

$10 a month for one certificate seems kind of expensive, considering a script with openssl can do the same thing for free. And only 25 for enterprise? Our midsize business is currently using 416 certs.

Can I ask how you've created 416 certificates for a mid size company? Holy shit, lol.

Unless those include SMIME certs, but still...

Re: Show HN: Snitch.io – SSL auditing and alerting

#17
post #7

Cool idea. I had the same idea back when Heartbleed was in full swing. Nice to see that someone has actually executed the idea. Bravo!

There are various implementations of the same idea out there and they've been there for long.

In any case, very nice execution on the front end. Good job.

Re: Show HN: Snitch.io – SSL auditing and alerting

#18

Earlier quoted context omitted.

Perhaps a non-problem for startups, but it's definitely a problem for bigger companies where the group that purchases certs may not be the one using them...

I would think that bigger companies would use dedicated IT staff over a start-up for something crucial like SSL cert checking.

Given that Microsoft and Amazon have both had their SSL certs for their cloud businesses expire, a little extra reminding probably can't hurt.

That said, I wouldn't pay for a service like this from a random person, I'd have my registrar do it (MarkMonitor or similar -- that's why they're paid the big bucks).

Re: Show HN: Snitch.io – SSL auditing and alerting

#19

$10 a month for one certificate seems kind of expensive, considering a script with openssl can do the same thing for free. And only 25 for enterprise? Our midsize business is currently using 416 certs.

Can I ask how you've created 416 certificates for a mid size company? Holy shit, lol. Unless those include SMIME certs, but still...

Lots of internal web services, web servers, VM hosts, MQ channels, LDAP stores, etc (times 5, for different platforms and locations). Everything gets a cert, haven't been using wildcards. Lots of internal signed certs, but they suffer the same problems that this service is trying to solve.
Post reply on HN