Jacob Hoffman-Andrews

minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.

Share your blocks and subscribe to others'

Web service to test DNS resolution against Unbound with config similar to Let's Encrypt

A tool to mirror all your GitHub repos. Run it in cron.

A simple tool to forward ports locally or remotely, no root or SSH required

Port of wget to Android

Minimal running web server examples with OCSP stapling

Verify various styles of GPG download signatures using TOFU.

Proof of concept: Updateable JS apps using code signing and bookmarklets

No description.

No description.

An ACME-based CA, written in Go.

A draft for a successor to RFC 6844

Rule checker for HTTPS Everywhere

A jQuery plugin to sandbox all JSONP requests in an off-domain iframe.

The Add-on SDK repository.

well-known test

An ACME client that can update Apache/Nginx configurations

Trillian implements a Merkle tree whose contents are served from a data storage layer, to allow scalability to extremely large trees.

Empowering everyone to build reliable and efficient software.

yubikey-agent is a seamless ssh-agent for YubiKeys.

Crossplatform graphical user interface to generate one-time passwords.

No description.

Source code for generating our website

A Ruby client for the letsencrypt's ACME protocol.

PowerDNS

Portable OpenSSH

ISRG / Let's Encrypt CP and CPS Documents

A demo of making a Rust staticlib with exclusive control of its own logs

command line tool to tail logs from many kubernetes pods

Fast and full-featured SSL scanner

duraconf - A collection of hardened configuration files for SSL/TLS services

The python REST API for the OpenWireless administrator gateway

The home of the EFF OpenWireless Project

A system for ensuring & authenticating STARTTLS encryption between mail servers

ACME Specification

The sequelize CLI.

An authoritative DNS server that serves horrible responses in order to test recursive behavior

The HTTPS-Only Standard for federal domains (M-15-13), and helpful implementation guidance.

No description.

Auditing for TLS certificates.

:lock: Handles submissions to Chromium's HSTS preload list.

Scan domains and return data based on HTTPS best practices

[deprecated] Let's Encrypt authenticator for route53. Now bundled with Certbot itself

Fork

OAuth wrapper for node.js

No description.

CFSSL: CloudFlare's PKI toolkit

X.509 certificate linter, written in Go

Automatically provision and manage TLS certificates in Kubernetes

An interface to PKCS#11 devices that satisfies the crypto.Signer interface

pkcs11 wrapper for Go

Automatically request certificates for Kubernetes Ingress resources from Let's Encrypt

Hello and welcome to DNS!

Auditing for TLS certificates, Go code.

No description.

Fast, cross-platform HTTP/2 web server with automatic HTTPS

Twitter4J is an open-sourced, mavenized and Google App Engine safe Java library for the Twitter API which is released under the BSD license.

Certificate Transparency stuff

Twitter OAuth REST API client library for Ruby

No description.

Mustache in Python

Scala JSON toolkit. Originally from the Odersky "Stairway" Book, tightened up and tests added by Twitter, Inc.

Community Cryptography Specification Project

No description.

test harness for delete strategies

Rust teams structure

CA/Browser Forum

OpenSSL bindings for Rust

Internet Draft for the Automated Certificate Management Environment (ACME) Renewal Information (ARI) Extension

Blog source for https://jacob.hoffman-andrews.com/README

No description.

A Certificate Transparency log implementation and monitoring API designed for scalability, ease of operation, and reduced cost.

CRL Monitor

Type-safe, compiled Jinja-like templates for Rust

The Go programming language

CA certificates for use with webpki

No description.

No description.

The content behind MDN Web Docs

Do they correspond?

Raw bindings to platform APIs for Rust

Website for graphing performance of rustc

Website for the Tokio project

No description.

No description.

DEFLATE, gzip, and zlib bindings for Rust

The Rust toolchain installer

The home of the Rust website

Date and time library for Rust

Type-safe Redis client for Golang

An NTP implementation in Rust, supported by Internet Security Research Group's Prossimo project.

Rust Infrastructure automation

glob functionality for node.js

A small utility to crawl and audit a CT log for certain kinds of data discrepancies

A one-off tool to update a Trillian DB to change the timestamp on some entries

No description.

Github hooks to provide an encouraging atmosphere for new contributors

No description.

A guide to how rustc works and how to contribute to it.

A bot that integrates with GitHub and your favorite continuous integration service

crates.io documentation generator

A template engine for Rust based on Jinja2/Django

A modern TLS library in Rust

An HTTP library for Rust

[mirror] Go supplementary cryptography libraries

Integration with OS certificate stores for rustls

Go MySQL Driver is a MySQL driver for Go's (golang) database/sql package

No description.

Minimal request library in rust.

Go library for the Cloudflare v4 API

A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, MQTT, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features

No description.

AWS SDK for the Go programming language.

Utility provider for interacting with generic HTTP servers as part of a Terraform configuration.

AWS SDK for Rust

No description.

libgit2 bindings for Rust

URL parser for Rust

Internet Securty Research Group's website

The Rust package manager

Source code for crates.io

Encoder and decoder for HTTP chunked transfer coding (RFC 7230 § 4.1)

X.509 certificate linter

A cargo subcommand to fetch the source code of a Rust crate

Persistent stacks and queues for Go backed by LevelDB

An easy and powerful Rust HTTP Client

Miscellaneous Go projects

A simple, modern and secure encryption tool with small explicit keys, no config options, and UNIX-style composability.

How to spread Certificates Authorities like Let's Encrypt

Node Version Manager - Simple bash script to manage multiple active node.js versions

Let's Encrypt client and ACME library written in Go

Package httpdown provides http.ConnState enabled graceful termination of http.Server.

The Prometheus monitoring system and time series database.

Prometheus documentation: content and static site generator

A tool to monitor a CT log for operational problems

OSS-Fuzz - continuous fuzzing of open source software

Unbound is a validating, recursive, and caching DNS resolver. This is an export of the subversion repository at https://nlnetlabs.nl/svn/unbound/

dnslol is a command line tool for performing lots of DNS lookups.

Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.

A High Scalability Solution for MySQL Clustering and High Availability

Simple server that scrapes HAProxy stats and exports them via HTTP for Prometheus consumption

X.509 Certificate Linter based on CA/B Forum Baseline Requirements and RFC 5280

The Go language implementation of gRPC. HTTP/2 based RPC

[Go] Package of validators and sanitizers for strings, numerics, slices and structs

No description.

Go Relational Persistence - an ORM-ish library for Go

Node module for Twitter API via HTTP/2

An easy-to-use multi SQL dialect ORM for Node.js

Let's Encrypt (ACME) support for Apache httpd

Website files for KeePassXC

Grafana dashboards for MySQL and MongoDB monitoring using Prometheus

Diff of Twitter's old and new (2017) privacy policies

Prometheus monitoring for your gRPC Go servers.

Library and command line tool to detect SHA-1 collision in a file

No description.

Source files for the neveragain.tech site

Metrics for Let's Encrypt

A port of log4js to node.js

A Go client library for the Twitter 1.1 API

An XMPP client with OTR support

Go support for Google's protocol buffers

NodeJS package to set status on a PR.

No description.

DNS library in Go

Domain name parser for Go based on the Public Suffix List.

[mirror] Go supplementary network libraries

Prebuilt tools to make Boulder CI builds faster

✨Node.js ✨

The best way to read webcomic archives: with keyboard shortcuts and preloading

A Node.js Mustache template engine (and compiler)

transactional connection queue for dnode

An HTTP/2 client and server implementation for node.js

An implementation of JOSE standards in Golang.

Simplified HTTP request client.

No description.

Simple module for using Twitter's API in node.js

No description.

safe, constant-time string comparison

A browser extension that detects and blocks sites vulnerable to Heartbleed