note: certstream.calidog.io connect-close loop (code 1000, 0 msgs) — CertSpotter fallback queued

6760b8cb2701b027aa844cecda0e3d58c06f74cf · 2026-05-12 15:55:09 -0700 · Steve Abrams

Files touched

M README.md

Diff

commit 6760b8cb2701b027aa844cecda0e3d58c06f74cf
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue May 12 15:55:09 2026 -0700

    note: certstream.calidog.io connect-close loop (code 1000, 0 msgs) — CertSpotter fallback queued
---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index 52bcffb..1d0f4e3 100644
--- a/README.md
+++ b/README.md
@@ -55,6 +55,10 @@ Spot-checks via DoH at increasing intervals to find where the snipe window close
 | ~24h   | full batch       | — |
 | ~48h   | full batch (final) | — |
 
+## Known issues
+
+- **2026-05-12 22:54 UTC** — `wss://certstream.calidog.io/` connects but closes with code 1000 after ~60s without sending any messages. Both `watch-ct.js`, `brand-typo-watcher.js`, and `dashboard.js` are affected. The public Calidog CertStream server has been documented as flaky for 18+ months. **Fallback to ship next:** poll `https://api.certspotter.com/v1/issuances?after=<last_id>&expand=dns_names&expand=issuer` every 30s (100 req/hr free tier — well within budget at 120 req/hr × 1 endpoint). Cursor state in `data/certspotter-cursor.json`. Affected scripts already have reconnect-with-backoff loops, so a unified fallback can drop in as a sibling `ct-source-certspotter.js` module that both consumers import.
+
 ## YOLO loop notes
 
 When running in autonomous /loop mode, each tick must:

← 109b3c1 step 10: dashboard UX — sort tabs, click-to-copy reg cmd, au · back to Domain Sniper · ct-source-certspotter.js: skeleton module + standalone smoke 7a91f94 →