[tor-project] Fwd: [tor-relays] Proton now takes Tor

[Mike Tigas]

Nima Fatemi:
> This makes them the 3rd site which has valid cert from digicert. Right?
> Or are there others that I've missed?

A nice side effect of these all being EV certs from DigiCert (per
heightened verification requirements) is that they're required to be
included in Certificate Transparency logs
<https://en.wikipedia.org/wiki/Certificate_Transparency>. At least, I think?

https://crt.sh lets you do some queries against Comodo's log (maybe
other sources?). Did a quick query for SubjectAltName dNSName "%.onion"
<https://crt.sh/?dNSName=%25.onion> and filtered down to uniques.

(There might be some others where the %.onion is only located in the
commonName field though? <https://crt.sh/?a=1>)

anyway; nothing about current validity of these certs or such (though
you can probably check that first crt.sh link for the original search
and click through to the actual cert info for each), but this should be
a near-comprehensive list of all the .onion names that DigiCert has
issued certs for:

*.cyphdbyhiddenbhs.onion
cyphdbyhiddenbhs.onion
protonirockerxow.onion
3g2upl4pq6kufc4m.onion
www.3g2upl4pq6kufc4m.onion
www.y6xjgkgwj47us5ca.onion
y6xjgkgwj47us5ca.onion
nytimes2tsqtnxek.onion
*.facebookcorewwwi.onion
facebookcorewwwi.onion
*.fbcdn23dssr3jqnq.onion
*.fbsbx2q4mvcl63pw.onion
*.m.facebookcorewwwi.onion
*.xx.fbcdn23dssr3jqnq.onion
*.xy.fbcdn23dssr3jqnq.onion
*.xz.fbcdn23dssr3jqnq.onion
xx.fbcdn23dssr3jqnq.onion
xz.fbcdn23dssr3jqnq.onion
xy.fbcdn23dssr3jqnq.onion
m.facebookcorewwwi.onion
fbcdn23dssr3jqnq.onion
fbsbx2q4mvcl63pw.onion
blockchainbdgpzk.onion
blockchatvqztbll.onion
coinpaymtstgtibr.onion
tess2mkorb55pl7i.onion
www.tess2mkorb55pl7i.onion
cyph.ws.cyphdbyhiddenbhs.onion
osf22p3lmweopgho.onion
*.privacyintyqcroe.onion
privacyintyqcroe.onion
btcforuml2pcfkyx.onion
www.btcforuml2pcfkyx.onion
*.ppasset42kropoy6.onion
ppasset42kropoy6.onion
*.propub3r6espa33w.onion
propub3r6espa33w.onion
*.pubapp7v22ykdou3.onion
pubapp7v22ykdou3.onion
pubdrop4dw6rk3aq.onion
audio.cyphdbyhiddenbhs.onion
im.cyphdbyhiddenbhs.onion
video.cyphdbyhiddenbhs.onion
k6jyto7zq7xxriux.onion
www.k6jyto7zq7xxriux.onion
fyxifz6xwx3d67a2.onion
sarajarxpvoenum6.onion
ajarouh33jee5tos.onion
*.xczxxczkjivdfsop.onion



Mike Tigas
News Applications Developer, ProPublica
http://www.propublica.org/
@mtigas | https://mike.tig.as/ | 0x6E0E9923

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-project/attachments/20170120/cee0ca2c/attachment.sig>