Changing of the Guards: Certificate and Public Key Management on the Internet

Bruhner, Carl Magnus,1988-Linköpings universitet,Databas och informationsteknik,Tekniska fakulteten (författare)

Funding Agencies|Swedish Research Council (VR)Swedish Research Council; Wallenberg AI, Autonomous Systems and Software Program (WASP) - Knut and Alice Wallenberg Foundation
Certificates are the foundation of secure communication over the internet. However, not all certificates are created and managed in a consistent manner and the certificate authorities (CAs) issuing certificates achieve different levels of trust. Furthermore, user trust in public keys, certificates, and CAs can quickly change. Combined with the expectation of 24/7 encrypted access to websites, this quickly evolving landscape has made careful certificate management both an important and challenging problem. In this paper, we first present a novel server-side characterization of the certificate replacement (CR) relationships in the wild, including the reuse of public keys. Our data-driven CR analysis captures management biases, highlights a lack of industry standards for replacement policies, and features successful example cases and trends. Based on the characterization results we then propose an efficient solution to an important revocation problem that currently leaves web users vulnerable long after a certificate has been revoked.

Linnarsson, OscarLinköpings universitet(Swepub:liu)n/a (författare)
Nemec, MatusLinköpings universitet,Databas och informationsteknik,Tekniska fakulteten(Swepub:liu)matne92 (författare)
Arlitt, MartinUniv Calgary, Canada (författare)
Carlsson, NiklasLinköpings universitet,Databas och informationsteknik,Tekniska fakulteten(Swepub:liu)nikca89 (författare)
Linköpings universitetDatabas och informationsteknik (creator_code:org_t)

Ingår i:Passive and active measurement (PAM 2022)Cham : Springer International Publishing, s. 50-8097830309878559783030987848

Av författaren/redakt...: Bruhner, Carl Ma ...; Linnarsson, Osca ...; Nemec, Matus; Arlitt, Martin; Carlsson, Niklas

Om ämnet

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.