Jacob Hoffman-Andrews

minica. minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.

blocktogether. Share your blocks and subscribe to others'

unboundtest. Web service to test DNS resolution against Unbound with config similar to Let's Encrypt

github-sync. A tool to mirror all your GitHub repos. Run it in cron.

listenbuddy. A simple tool to forward ports locally or remotely, no root or SSH required

android-wget. Port of wget to Android

ocsp-stapling-examples. Minimal running web server examples with OCSP stapling

gpg-download-verifier. Verify various styles of GPG download signatures using TOFU.

verify-js. Proof of concept: Updateable JS apps using code signing and bookmarklets

learnrust. Rust

boulder. An ACME-based CA, written in Go.

caa-simplification. A draft for a successor to RFC 6844

mkstats. Go

https-everywhere-checker. Rule checker for HTTPS Everywhere

jsonp-sandbox. A jQuery plugin to sandbox all JSONP requests in an off-domain iframe.

rust-private-loggers. A demo of making a Rust staticlib with exclusive control of its own logs

rust. Empowering everyone to build reliable and efficient software.

acme-client. A Ruby client for the letsencrypt's ACME protocol.

yubikey-agent. yubikey-agent is a seamless ssh-agent for YubiKeys.

kube-lego. Automatically request certificates for Kubernetes Ingress resources from Let's Encrypt

trillian. Trillian implements a Merkle tree whose contents are served from a data storage layer, to allow scalability to extremely large trees.

kubetail. command line tool to tail logs from many kubernetes pods

certificate-transparency-go. Auditing for TLS certificates, Go code.

awful.zone. An authoritative DNS server that serves horrible responses in order to test recursive behavior

certlint-1. X.509 certificate linter, written in Go

pshtt. Scan domains and return data based on HTTPS best practices

pdns. PowerDNS

hello-dns. Hello and welcome to DNS!

cert-manager. Automatically provision and manage TLS certificates in Kubernetes

caddy. Fast, cross-platform HTTP/2 web server with automatic HTTPS

openssh-portable. Portable OpenSSH

certificatetransparency. Certificate Transparency stuff

starttls-everywhere. A system for ensuring & authenticating STARTTLS encryption between mail servers

cfssl. CFSSL: CloudFlare's PKI toolkit

https. The HTTPS-Only Standard for federal domains (M-15-13), and helpful implementation guidance.

certificate-transparency. Auditing for TLS certificates.

acme-spec. ACME Specification

cp-cps. ISRG / Let's Encrypt CP and CPS Documents

yubioath-desktop. Crossplatform graphical user interface to generate one-time passwords.

.well-known. well-known test