var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));

Perpsectives Notary Demo: SSH and SSL Host Key Records

This is a simple web interface to query Perspective's overlay of "network notary" servers. Network notaries let you see a diverse views of the public key(s) used by a network service (e.g., SSH or HTTPS) over time.

To learn more about the Perspectives project, see the main project page .


Try your own Notary query

Host:
Port:       Default port for HTTPS is 443, for SSH 22.
Protocol: SSL     SSH

Results for www.cs.cmu.edu:443

10-day Key History

200-day Key History

Notary Result Details

***********  Probes from server 216.139.253.36:15217 ********** 
ssl key: 31:e4:9c:8c:2c:0a:7d:45:71:b0:e0:76:ea:a9:f9:17 
start:	 1241624828 - Wed May  6 11:47:08 2009
end:	 1246908055 - Mon Jul  6 15:20:55 2009

ssl key: a0:47:e4:93:74:a0:05:21:65:e0:6e:e3:6d:99:b3:c1 
start:	 1246908056 - Mon Jul  6 15:20:56 2009
end:	 1257585797 - Sat Nov  7 04:23:17 2009

***********  Probes from server 66.232.160.65:15217 ********** 
ssl key: 31:e4:9c:8c:2c:0a:7d:45:71:b0:e0:76:ea:a9:f9:17 
start:	 1242069068 - Mon May 11 15:11:08 2009
end:	 1246907690 - Mon Jul  6 15:14:50 2009

ssl key: a0:47:e4:93:74:a0:05:21:65:e0:6e:e3:6d:99:b3:c1 
start:	 1246907691 - Mon Jul  6 15:14:51 2009
end:	 1257585090 - Sat Nov  7 04:11:30 2009

***********  Probes from server 204.225.124.41:15217 ********** 
ssl key: a0:47:e4:93:74:a0:05:21:65:e0:6e:e3:6d:99:b3:c1 
start:	 1246932746 - Mon Jul  6 22:12:26 2009
end:	 1257584100 - Sat Nov  7 03:55:00 2009

***********  Probes from server 128.2.212.179:15217 ********** 
ssl key: a0:47:e4:93:74:a0:05:21:65:e0:6e:e3:6d:99:b3:c1 
start:	 1246882972 - Mon Jul  6 08:22:52 2009
end:	 1257559602 - Fri Nov  6 21:06:42 2009

ssl key: 31:e4:9c:8c:2c:0a:7d:45:71:b0:e0:76:ea:a9:f9:17 
start:	 1219131565 - Tue Aug 19 03:39:25 2008
end:	 1246882971 - Mon Jul  6 08:22:51 2009

Frequently Asked Questions (FAQ)

  1. Keys are shown as 128-bit MD5 hashes. This is identical to the "key fingerprint" that you see for unauthenticated keys in SSH. For HTTPS, Firefox and Safari will show you the MD5 fingerprint if you view the details of a certificate.
  2. Note: If you get results that contain [NULL LIST] that means some servers did not have any results for your service. The notary servers do probe "on demand" when you request, but if some servers did not reply, issue the query again, as the local client may have timed-out before the notaries finished probing for the key. If you continue to get no results and you are sure that the host is reachable, please contact us.
  3. Notaries only keep history for services that have been requested in the past, so when you first query a about a service, there may be no history.