Skip to content

octosign/lotl-proxy

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

EU LOTL Proxy

A simple serverless function that is called periodically to download and save EU LOTL so we can distribute it on our own from one place. In production, fetch endpoint is available via CDN. These files are not modified in any way and original signatures are therefore still there and can be verified (therefore it doesn't matter where this list comes from).

Reasons why this proxy was created:

  1. Response time can vary a lot.
  2. From time to time, some of the lists would time out or would not be available at all.

By keeping a copy of the lists, we can distribute them using our own CDN. Therefore, we can be pretty sure the user will be able to get any of them reliably and predictably fast.

Development

If you want to get this running locally, simply clone this repository and then run npm install && npm start.

There are two functions: refresh and fetch. Refresh is meant to be run periodically like every 6 hours and saves EU LOTL and all of the referenced files to S3. Fetch is a GET endpoint that can then retrieve any of those files for the running application.

You can deploy the proxy to AWS using npm run deploy.

About

Proxy to EU LOTL and its lists for Octosign

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published