The Internet Security Research Group has detailed a new data warehouse built on ClickHouse for Let's Encrypt, alongside a security-focused Hickory DNS release and a new corporate sponsor.
Let's Encrypt retired the scripts generating data for letsencrypt.org/stats after they broke again, opting to build a data warehouse using ClickHouse instead. The certificate authority issues six to ten million certificates each day, producing a growing volume of logs that made answering questions about its own issuance increasingly difficult. Querying the database behind its issuance API was not practical because it is built for transactions rather than analysis, and a log search SaaS product proved costly and unable to handle the needed analytic workloads.
Hickory DNS, a high-performance, memory-safe, fully recursive DNS resolver developed as part of ISRG's Prossimo project, released v0.26.2 in response to a large number of LLM-assisted vulnerability reports. ISRG thanked David Cook, Dirkjan Ochtman and Daniel McCarney for preparing the release, and researchers including Qifan Zhang of Palo Alto Networks for helping make Hickory DNS more secure.
Datadog joined as a Silver Sponsor. "HTTPS should be the default everywhere. Let's Encrypt made that practical at internet scale, and we're proud to support that work," said Jeremy Garcia, VP, Technical Community and Open Source at Datadog.
ISRG also thanked supporters of its Summer Campaign, noting donations came from 57 countries across six continents. It invited companies that rely on its work to become sponsors by contacting sponsor@letsencrypt.org, and said staff would attend the Open Source Summit Europe in Prague in October.