[kictanet] Why are lots of .go.ke websites not https://?

[Benson Muite]

Bwana Teri,

https://github.com/aboul3la/Sublist3r
https://www.nmmapper.com/sys/tools/subdomainfinder/

A responsible disclosure policy may be helpful.

It is interesting to note that Pakistan, India, Tunisia and a number of 
other countries have their own certification authorities (partly to 
control digital signing):
https://www.ecac.org.pk/
https://www.cca.gov.in/
https://www.tuntrust.tn/
South Africa seems to use accreditation of certification authorities:
http://www.saaa.gov.za/index.php/accreditation/2013-12-04-09-28-29.html

Apart from Tunisia and South Africa, there do not seem to be other 
certification authorities based in Africa that are automatically trusted 
in many browsers or other internet access devices.

Benson

On 11/23/21 2:15 PM, Kenic CEO via KICTANet wrote:
> Good day Adrian
> 
> Thank you for the response.
> 
> We would need to look at publishing of domain names in line with the DPA 
> 2019 and if that contravenes any privacy aspects.
> 
> On your second point of generating data sets we have embarked on a 
> project, where by we want to collect various data points across networks 
> and publish a consolidated report for consumption.
> 
> We are happy to get views and partner with data holders who may want 
> collaborate.
> 
> regards
> 
> ----------------------------------
> Joel Karubiu
> Chief Executive Officer
> ceo at kenic.or.ke
> 
> ------------------------------------------------------------------------
> *From: *"Adrian Teri via KICTANet" <kictanet at lists.kictanet.or.ke>
> *To: *"Kenic CEO" <ceo at kenic.or.ke>
> *Cc: *"Adrian Teri" <adriateri at gmail.com>
> *Sent: *Tuesday, November 23, 2021 1:31:00 PM
> *Subject: *Re: [kictanet] KICTANet Digest, Vol 165, Issue 11
> 
> Good day Barrack,
> 
> These stats are not adequate. Does Kenic have bulk downloadable zones 
> host files like ICANN with it's Centralised Zone Data Service - 
> _https://www.icann.org/resources/pages/czds-2014-03-03-en 
> <https://www.icann.org/resources/pages/czds-2014-03-03-en>_ . I 
> understand it's quite controversial for such data to be given out as 
> data mining and then spamming can occur.
> 
> As a middle ground can Kenic share out monthly updated lists of 
> registered domains as they do with deleted domains - 
> _https://kenic.or.ke/category/deleted-domains/ 
> <https://kenic.or.ke/category/deleted-domains/> _?
> 
> I see numerous and interesting insights that can be gleaned. E.g how 
> many and which domains are hosted in the country? Their latency/response 
> time. Uptime for the sites. Security stats like which TLS versions are 
> supported, the headers that are sent back in response like 
> X-Frame-Options and Content Security Policy (CSP), SSL certificate 
> validity, Versions of Web servers they are running and also which 
> frameworks/programming languages they are running ...etc
> 
> Yours Kindly,
> Adrian
> 
> 
>     ---------- Forwarded message ----------
>     From: Barrack Otieno <otieno.barrack at gmail.com
>     <mailto:otieno.barrack at gmail.com>>
>     To: njukey at gmail.com <mailto:njukey at gmail.com>, "Kenya's premier ICT
>     Policy engagement platform" <kictanet at lists.kictanet.or.ke
>     <mailto:kictanet at lists.kictanet.or.ke>>
>     Cc:
>     Bcc:
>     Date: Tue, 23 Nov 2021 11:22:59 +0300
>     Subject: Re: [kictanet] Why are lots of .go.ke <http://go.ke>
>     websites not https://?
>     Hi @njukey at gmail.com <mailto:njukey at gmail.com>
> 
>     https://registry.kenic.or.ke/statistics.jsp
>     <https://registry.kenic.or.ke/statistics.jsp>
> 
>     Regards
> 
> 
>     On Tue, Nov 23, 2021 at 9:49 AM David Njuki via KICTANet
>     <kictanet at lists.kictanet.or.ke
>     <mailto:kictanet at lists.kictanet.or.ke>> wrote:
> 
>         Hi Barrack,
> 
>         Is there data somewhere on all the .go.ke <http://go.ke>
>         registered domains?
> 
>         Regards,
>         David
>