NolaCon 2017 GBC04 EDNS Client Subnet ECS DNS CDN Magic or Secur Jim Nitterauer
archive.is not resolving under 1.1.1.1 Cloudflare DNS resolver
Resolving Google using two different IP address will provide two different results.
| # get the SHA-1 digest of the subjectPublicKeyInfo of a certificate as used by Chromium's preloaded public key pinning | |
| # http://src.chromium.org/viewvc/chrome/trunk/src/net/http/transport_security_state_static.h?r1=191212&r2=191211&pathrev=191212 | |
| curl -s https://pki.google.com/GIAG2.crt | openssl x509 -inform der -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha1 | |
| # (stdin)= 43dad630ee53f8a980ca6efd85f46aa37990e0ea | |
| # get the base64-encoded SHA-256 digest of the subjectPublicKeyInfo of a certificate as used by HTTP Public Key Pinning | |
| # (http://tools.ietf.org/html/draft-ietf-websec-key-pinning-11) | |
| curl -s https://pki.google.com/GIAG2.crt | openssl x509 -inform der -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | base64 | |
| # 7HIpactkIAq2Y49orFOOQKurWxmmSFZhBCoQYcRhJ3Y= |