Sigsum currently runs two log servers.
Proof-of-concept log, following the main branch of the log-go repository, intended for testing. Public key and url, in policy file format:
log 154f49976b59ff09a123675f58cb3e346e0455753c3c3b15d465dcb4f6512b0b https://poc.sigsum.org/jellyfish
Test log, running the latest log server release. Public key and url:
log 80d115da542b67bb7a15448f50fe951e59cfa9db73807bfc12a2a4a981ba251e https://ghost-shrimp.sigsum.org
We plan to deploy a production log, with stronger commitment on availability and documented security practices.
We plan to deploy a witness for cosigning both our own logs and other’s logs.
Repositories for source code and documentation, issue trackers, continuous testing, etc, runs at our gitlab instance.