From a9f1003effedf586a2a5ff413d9a509363bd9438 Mon Sep 17 00:00:00 2001 From: Matthew McPherrin Date: Thu, 5 Apr 2018 12:34:16 -0700 Subject: [PATCH] Antitrust readme --- antitrust/README.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 antitrust/README.md diff --git a/antitrust/README.md b/antitrust/README.md new file mode 100644 index 0000000..d44e017 --- /dev/null +++ b/antitrust/README.md @@ -0,0 +1,17 @@ +# Antitrust + +Antitrust is a library for trusting trust stores. + +It contains "known bad" trust stores, like Superfish, Turktrust and Wosign. +You can use this to notice if your trust stores contain any bad CAs. It also +has well-known trust stores so you can notice if your trust stores contain any +old, custom, or unusual CAs. + +The API is pretty simple: + - You give it a CA and antitrust tells you about it. + - You give it a leaf and intermediates, and antitrust tells you what each known + trust store would trust it. + +TODO: + It would be nice to also catalog "common" intermediate certs, to provide more +helpful diagnosis of chain issues. AIA fetching could help here, too.