IEEE Transactions on Dependable and Secure Computing · 2020 · 15 citations · 6 references
Public Key InfrastructureInternet SecurityWs-securityEngineeringCertificate ValidationInformation SecurityTls Interception ProductsVerificationSecurity TestingTransport Layer SecurityOcsp StaplingSecure ProtocolSecurity ProtocolsWeb X.509 CertificatesCybersecurity ProtocolsData SecurityCryptography
The Transport Layer Security (TLS) protocol aims to provide confidentiality and integrity of data. It is based on X.509 Certificates. Our previous research showed that popular Web Browsers exhibit non-standardized behaviour with respect to the certificate validation process <xref ref-type="bibr" rid="ref1">[1]</xref> . This article extends that work by examining their handling of OCSP Stapling. We also examine several popular HTTPS interception products, including proxies and anti-virus tools, regarding their certificate validation processes. We analyse and compare their behaviour to that described in the relative standards.
6
Does Certificate Transparency Break the Web? Measuring Adoption and Error Rate
Emily Stark, Ryan Sleevi, Rijad Muminovic et al. · 2019 · 40 citations · Full text