Sökning: onr:"swepub:oai:DiVA.org:liu-156664" >
Server-Side Adoptio...
-
Nykvist, CarlLinköpings universitet,Institutionen för datavetenskap,Tekniska fakulteten
(författare)
Server-Side Adoption of Certificate Transparency
- Artikel/kapitelEngelska2018
Förlag, utgivningsår, omfång ...
-
2018-03-02
-
Cham :Springer,2018
-
printrdacarrier
Nummerbeteckningar
-
LIBRIS-ID:oai:DiVA.org:liu-156664
-
https://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-156664URI
-
https://doi.org/10.1007/978-3-319-76481-8_14DOI
Kompletterande språkuppgifter
-
Språk:engelska
-
Sammanfattning på:engelska
Ingår i deldatabas
Klassifikation
-
Ämneskategori:ref swepub-contenttype
-
Ämneskategori:kon swepub-publicationtype
Anmärkningar
-
Certificate Transparency (CT) was developed to mitigate shortcomings in the TLS/SSL landscape and to assess the trustworthiness of Certificate Authorities (CAs) and the certificates they create. With CT, certificates should be logged in public, audible, append-only CT logs and servers should provide clients (browsers) evidence, in the form of Signed Certificate Timestamps (SCTs), that the certificates that they present have been logged in credible CT logs. These SCTs can be delivered using three different methods: (i) X.509v3 extension, (ii) TLS extension, and (iii) OSCP stapling. In this paper, we develop a client-side measurement tool that implements all three methods and use the tool to analyze the SCT adoption among the one-million most popular web domains. Using two snapshots (from May and Oct. 2017), we answer a wide range of questions related to the delivery choices made by different domains, identify differences in the certificates used by these domains, the CT logs they use, and characterize the overheads and potential performance impact of the SCT delivery methods. By highlighting some of the tradeoffs between the methods and differences in the websites selecting them, we provide insights into the current SCT adoption status and differences in how domains have gone upon adopting this new technology.
Ämnesord och genrebeteckningar
Biuppslag (personer, institutioner, konferenser, titlar ...)
-
Sjöström, Linus,1995-Linköpings universitet,Databas och informationsteknik,Tekniska fakulteten(Swepub:liu)linsj43
(författare)
-
Gustafsson, JosefLinköpings universitet,Institutionen för datavetenskap,Tekniska fakulteten(Swepub:liu)n/a
(författare)
-
Carlsson, Niklas,1977-Linköpings universitet,Databas och informationsteknik,Tekniska fakulteten(Swepub:liu)nikca89
(författare)
-
Linköpings universitetInstitutionen för datavetenskap
(creator_code:org_t)
Sammanhörande titlar
-
Ingår i:Passive and Active MeasurementCham : Springer, s. 186-19997833197648019783319764818
Internetlänk
Hitta via bibliotek
Till lärosätets databas