Sökning: WFRF:(Carlsson Niklas 1977 ) >
Characterizing the ...
Characterizing the Root Landscape of Certificate Transparency Logs
-
- Korzhitskii, Nikita (författare)
- Linköpings universitet,Databas och informationsteknik,Tekniska fakulteten
-
- Carlsson, Niklas, 1977- (författare)
- Linköpings universitet,Databas och informationsteknik,Tekniska fakulteten
-
(creator_code:org_t)
- IEEE, 2020
- 2020
- Engelska.
-
Ingår i: Proceedings of the 19th International IFIP TC6 Networking Conference, IFIP Networking 2020, Paris, France, June 22-25. - : IEEE. - 9783903176287 - 9781728167107 ; , s. 190-198
- Relaterad länk:
-
https://ieeexplore.i...
-
visa fler...
-
http://dl.ifip.org/d...
-
https://liu.diva-por... (primary) (Raw object)
-
https://urn.kb.se/re...
-
visa färre...
Abstract
Ämnesord
Stäng
- Internet security and privacy stand on the trustworthiness of public certificates signed by Certificate Authorities (CAs). However, software products do not trust the same CAs and therefore maintain different root stores, each typically containing hundreds of trusted roots capable of issuing “trusted” certificates for any domain. Incidents with misissued certificates motivated Google to implement and enforce Certificate Transparency (CT). CT logs archive certificates in a public, auditable and append-only manner. The adoption of CT changed the trust landscape. As a part of this change, CT logs started to maintain their own root lists and log certificates that chain back to one of the trusted roots. In this paper, we present a first characterization of this emerging CT root store landscape, as well as the tool that we developed for data collection, visualization, and analysis of the root stores. As part of our characterization, we compare the logs’ root stores and quantify their changes with respect to both each other and the root stores of major software vendors, look at evolving vendor CT policies, and show that root store mismanagement may be linked to log misbehavior. Finally, we present and discuss the results of a survey that we have sent to the log operators participating in Apple’s and Google’s CT log programs.
Ämnesord
- TEKNIK OCH TEKNOLOGIER -- Elektroteknik och elektronik -- Datorsystem (hsv//swe)
- ENGINEERING AND TECHNOLOGY -- Electrical Engineering, Electronic Engineering, Information Engineering -- Computer Systems (hsv//eng)
- NATURVETENSKAP -- Data- och informationsvetenskap -- Datavetenskap (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Computer Sciences (hsv//eng)
Nyckelord
- Networking
- Internet architecture
- cryptography
- security
- WebPKI
- Certificate Transparency logs
- roots
Publikations- och innehållstyp
- ref (ämneskategori)
- kon (ämneskategori)
Hitta via bibliotek
Till lärosätets databas