SoK: SSL and HTTPS: Revisiting Past Challenges and Evaluating Certificate Trust Model Enhancements

Clark, J., van Oorschot, P. C.·2013·2013 IEEE Symposium on Security and Privacy
DOI 10.1109/sp.2013.41

Cited by (223)

Items 101–200 of 223

  1. Security Analysis of the Chinese Web
    Ping Chen, Nick Nikiforakis, Lieven Desmet, Christophe Huygens · 2014
  2. Evaluating Web PKIs
    Jiangshan Yu, Mark Dermot Ryan · 2017 · Elsevier eBooks
  3. The Threat of SSL/TLS Stripping to Online Voting
    Anthony Cardillo, Aleksander Essex · 2018 · Lecture notes in computer science
  4. IoTPatchPool: Incentivized delivery network of IoT software updates based on proofs-of-distribution
    Oded Leiba, Ron Bitton, Yechiav Yitzchak, Asaf Nadler, Davidoz Kashi, Asaf Shabtai · 2019 · Pervasive and Mobile Computing
  5. The Boon and Bane of Cross-Signing: Shedding Light on a Common Practice in Public Key Infrastructures
    Jens Hiller, Johanna Amann, Oliver Hohlfeld · 2020 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  6. Will you trust this TLS certificate?
    Martin Ukrop, Lydia Kraus, Vashek Matyáš, Heider A. Wahsheh · 2019 · Annual Computer Security Applications Conference
  7. Blockchain-based TLS Notary Service
    Paweł Szałachowski · 2018 · arXiv (Cornell University)
  8. The Era of TLS 1.3: Measuring Deployment and Use with Active and Passive Methods
    Holz, Ralph, Amann, Johanna, Razaghpanah, Abbas, Narseo Vallina-Rodríguez · 2019 · arXiv (Cornell University)
  9. SECMACE+: Upscaling Pseudonymous Authentication for Large Mobile Systems
    Mohammad Khodaei, Hamid Noroozi, Panos Papadimitratos · 2023 · IEEE Transactions on Cloud Computing
  10. Stale TLS Certificates: Investigating Precarious Third-Party Access to Valid TLS Keys
    Zane Ma, Aaron Faulkenberry, Thomas Papastergiou, Zakir Durumeric, Michael D. Bailey, Angelos Dennis Keromytis, Fabian Monrose, Manos Antonakakis · 2023 · ACM Internet Measurement Conference (IMC)
  11. DCDroid
    Yingjie Wang, Xing Liu, Weixuan Mao, Wei Wang · 2019 · ACM Turing Celebration Conference - China (ACM TURC)
  12. TLS Proxies: Friend or Foe?
    Mark O'Neill, Scott Ruoti, Kent E. Seamons, Daniel Zappala · 2014 · arXiv (Cornell University)
  13. Indicators of Malicious SSL Connections
    Riccardo Bortolameotti, Peter Andreas, Maarten H. Everts, Damiano Bolzoni · 2015 · Lecture notes in computer science
  14. A Fast Factorisation of Semi-Primes Using Sum of Squares
    Anthony Overmars, Sitalakshmi Venkatraman · 2019 · Mathematical and Computational Applications
  15. TwinPeaks: An approach for certificateless public key distribution for the internet and internet of things
    Eunsang Cho, Jeong‐Nyeo Kim, Minkyung Park, Hyeonmin Lee, Chorom Hamm, Soobin Park, Sungmin Sohn, Minhyeok Kang, Ted Taekyoung Kwon · 2020 · Computer Networks
  16. Exposed! A case study on the vulnerability-proneness of Google Play Apps
    Andrea Di Sorbo, Sebastiano Panichella · 2021 · Empirical Software Engineering
  17. SoK: SCT Auditing in Certificate Transparency
    Sarah Meiklejohn, Joe DeBlasio, Devon O’Brien, Chris Thompson, Kevin Yeo, Emily Stark · 2022 · Proceedings on Privacy Enhancing Technologies
  18. TLScompare
    Wilfried Mayer, Martin Schmiedecker · 2016 · International World Wide Web Conference (WWW)
  19. Decentralizing Authorities into Scalable Strongest-Link Cothorities.
    Ewa Syta, Iulia Tamas, Dylan Visher, David Isaac Wolinsky, Bryan Ford · 2015 · arXiv (Cornell University)
  20. An Investigation of Cyber Autonomy on Government Websites
    Hsu‐Chun Hsiao, Tiffany Hyun‐Jin Kim, Yu-Ming Ku, Chun-Ming Chang, Hung-Fang Chen, Yu‐Jen Chen, Chun-Wen Wang, Wei Jeng · 2019 · International World Wide Web Conference (WWW)
  21. SALVE
    Der-Yeuan Yu, Aanjhan Ranganathan, Ramya Jayaram Masti, Claudio Soriente, Srđjan Čapkun · 2016 · ACM Annual International Conference on Mobile Computing and Networking (MobiCom)
  22. Análisis de Certificados SSL/TLS gratuitos y su implementación como Mecanismo de seguridad en Servidores de Aplicación.
    Mario E. Cueva Hurtado, Diego Javier Alvarado Sarango · 2017 · Enfoque UTE
  23. Developing a Conceptual Model for Applying the Principles of Crisis Management for Risk Reduction on Electronic Banking
    Maedeh Babaei Chafjiri · 2018 · American Journal of Computer Science and Technology
  24. Command and Control Information Systems applied to Large Forest Fires Response
    Marcelo Zambrano V, Israel Perez, Federico Carvajal, Manuel Esteve, Carlos Enrique Palau · 2017 · IEEE Latin America Transactions
  25. Understanding the Security and Performance of the Web Presence of Hospitals: A Measurement Study
    Mohammed Alkinoon, Abdulrahman Alabduljabbar, Hattan Althebeiti, Rhongho Jang, DaeHun Nyang, Aziz Mohaisen · 2023 · International Conference on Computer Communications and Networks (ICCCN)
  26. Privacy-Preserving & Incrementally-Deployable Support for Certificate Transparency in Tor
    Rasmus Dahlberg, Tobias Pulls, Tom Ritter, Paul F. Syverson · 2021 · Proceedings on Privacy Enhancing Technologies
  27. Certification with Multiple Signatures
    Xinli Wang, Yan Zhi Bai, Lihui Hu · 2015
  28. An efficient privacy protection solution for smart home application platform
    Yunqiang Liu, Guanhua Zhang, Wenjie Chen, Xinming Wang · 2016 · IEEE International Conference on Computer and Communications (ICCC)
  29. Invalid certificates in modern browsers: A socio-technical analysis
    Rosario Giustolisi, Giampaolo Bella A, Gabriele Lenzini · 2018 · Journal of Computer Security
  30. Deceiving Attackers in Wireless Local Area Networks Using Decoys
    A. Aswin kumar, Ashok Kumar Mohan, P. P. Amritha · 2018 · Journal of Cyber Security and Mobility
  31. TrustBase: An Architecture to Repair and Strengthen Certificate-based Authentication
    Mark O'Neill, Scott Heidbrink, Jordan Whitehead, Scott Ruoti, Dan Bunker, Kent E. Seamons, Daniel Zappala · 2016 · arXiv (Cornell University)
  32. Will You Trust This TLS Certificate?
    Martin Ukrop, Lydia Kraus, Vashek Matyáš · 2020 · Digital Threats Research and Practice
  33. Tracking adoption of revocation and cryptographic features in X.509 certificates
    Maryam Zulfiqar, Muhammad Umar Janjua, Muhammad Hassan, Talha Ahmad, Tania Saleem, Jack W. Stokes · 2021 · International Journal of Information Security
  34. Server notaries: a complementary approach to the web PKI trust model
    Emre Yüce, Ali Aydın Selçuk · 2018 · IET Information Security
  35. New challenges in digital forensics : online storage and anonymous communication
    Martin Mulazzani · 2014 · reposiTUm (TU Wien)
  36. Understanding SSL Protocol and Its Cryptographic Weaknesses
    Aditya Aayush, Yash Aryan, Balachandra Muniyal · 2022 · International Conference on Intelligent Engineering and Management (ICIEM)
  37. A distributed online certificate status protocol for named data networks
    Daniel Rezende, Carlos Maziero, Elisa Mannes · 2018 · ACM Symposium on Applied Computing
  38. Mailto: Me Your Secrets. On Bugs and Features in Email End-to-End Encryption
    Jens Müller, Marcus Brinkmann, Damian Poddebniak, Sebastian Schinzel, Jörg Schwenk · 2020 · IEEE Conference on Communications and Network Security
  39. Analysis of Mozambican websites: How do they protect their users?
    Ambrósio Patrício Vumo, Josef Spillner, Stefan Köpsell · 2017 · Information Security for South Africa
  40. TrojanProbe: Fingerprinting Trojan tunnel implementations by actively probing crafted HTTP requests
    Lei Lv, Peng Zhou · 2024 · Computers & Security
  41. Watching the Weak Link into Your Home: An Inspection and Monitoring Toolkit for TR-069
    Maximilian Hils, Rainer Böhme · 2020 · Lecture notes in computer science
  42. Situation awareness in the large forest fires response. A solution based on wireless mesh networks
    Marcelo Zambrano V, Manuel Esteve, Israel Perez, Federico Carvajal, Ana Zambrano · 2017 · IEEE Latin-American Conference on Communications
  43. What's in a name? Exploring CA certificate control
    Zane Ma, Joshua Mason, Sarvar Patel, Manos Antonakakis, Mariana Raykova, Zakir Durumeric, Phillipp Schoppmann, Michael Bailey, Karn Seth, Sascha Fahl et al. · 2021
  44. API Misuse Detection in C Programs: Practice on SSL APIs
    Chi Li, Zuxing Gu, Min Qi Zhou, Jiecheng Wu, Jiarui Zhang, Ming Gu · 2019 · International Journal of Software Engineering and Knowledge Engineering
  45. The Battle for Privacy In Your Pocket [Notes from the Editor]
    Peter Corcoran · 2016 · IEEE Consumer Electronics Magazine
  46. Certificate Revocation in the TLS Ecosystem: A Survey
    Hyunsoo Kwon, Doowon Kim, Ho-Dong Kim, Changhee Hahn, Junbeom Hur · 2025 · ACM Computing Surveys
  47. Countering MitM Attacks Using Evolved PathFinder Algorithm
    Mouhcine Chliah, Ghizlane Orhanou, Saïd El Hajji · 2017 · International Journal of Cloud Applications and Computing
  48. Authenticating Compromisable Storage Systems
    Jiangshan Yu, Mark Dermot Ryan, Liqun Chen · 2017 · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)
  49. When Third-Party JavaScript Meets Cache: Explosively Amplifying Security Risks on the Internet
    Tao Hou, Shengping Bi, Mingkui Wei, Tao Wang, Zhuo Lu, Yao Liu · 2022 · IEEE Conference on Communications and Network Security
  50. Better Authentication: Password Revolution by Evolution
    Daniel Thomas, Alastair R. Beresford · 2014 · Lecture notes in computer science
  51. How to Misuse SMTP over TLS: A Study of the (In) Security of Email Server Communication
    Lars Baumgärtner, Jonas Höchst, Matthias Leinweber, Bernd Freisleben · 2015 · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)
  52. HTTPS
    Diana Gabriela Noemí Benítez-Mejía, Alejandro Zacatenco-Santos, Karina Toscano, Gabriel Sánchez-Pérez · 2017 · International Conference on Information Communication and Management (ICICM)
  53. Investigating Secure Implementation of Government Web based Systems in Tanzania
    Aron W. Kondoro, Joel Samson Mtebe · 2018 · International Journal of Computer Applications
  54. An Empirical Study of SSL Usage in Android Apps
    Dongwan Shin, Jiangfeng Sun · 2018 · IEEE International Carnahan Conference on Security Technology (ICCST)
  55. Enhanced Resource Management for Web Based Thin Clients Using Cross-Platform Progressive Offline Capabilities
    George Alex Stelea, Maurizio Murroni, Vlad Popescu, Titus Bălan, Vlad Fernoaga · 2019 · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering
  56. Securing web documents by using piggybacked framework based on Newton's forward interpolation method
    Jatin Arora, K. R. Ramkumar, R Sathiyaraj, G S Pradeep Ghantasala · 2023 · Journal of Information Security and Applications
  57. Server Location Verification and Server Location Pinning: Augmenting TLS Authentication
    AbdelRahman Abdou, Paul C. van Oorschot · 2016 · arXiv (Cornell University)
  58. Designing Indicators to Combat Fake Media
    Imani N. Sherman, Elissa M. Redmiles, J. Stokes · 2020 · arXiv.org
  59. NOPE: Strengthening domain authentication with succinct proofs
    Zachary DeStefano, J. Jeff, Joseph Bonneau, Michael Walfish · 2024 · ACM SIGOPS Symposium on Operating Systems Principles (SOSP)
  60. TLS with trustworthy certificate authorities
    Kevin S. Walsh · 2016 · IEEE Conference on Communications and Network Security
  61. Using soft systems methodology and activity theory to exploit security of web applications against heartbleed vulnerability
    Maduhu Mshangi, Edephonce Ngemera Nfuka, Camilius Aloyce Sanga · 2015
  62. SSLDoc: Automatically Diagnosing Incorrect SSL API Usages in C Programs
    Zuxing Gu, Jiecheng Wu, Chi Li, Min Qi Zhou, Ming Gu · 2019 · Proceedings/Proceedings of the ... International Conference on Software Engineering and Knowledge Engineering
  63. Privacy and Security Factors of Government Websites versus Private Websites in Bangladesh and USA: A Comparative Study
    Merina Tanjin, Ishorju Agnes Botlero, Mourina Tasnim Hridita, Tawsiful Islam Riyadh, Md. Mehedi Hassan Onik, Mahdi Hassan Miraz · 2021 · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering
  64. Are HTTPS Configurations Still a Challenge?: Validating Theories of Administrators’ Difficulties with TLS Configurations
    Alexandra Mai, Oliver Schedler, Edgar R. Weippl, Katharina Krombholz · 2022 · Lecture notes in computer science
  65. Exploring Website Location as a Security Indicator
    Der-Yeuan Yu, Elizabeth Stobert, David Basin, Srđjan Čapkun · 2018 · Workshop on Usable Security (USEC)
  66. Public-Key Certificate Management and Use Cases
    Paul C. van Oorschot · 2020 · Information security and cryptography
  67. DomainPKI
    Xinli Wang, Mostafa El-Said · 2020 · Conference on Information Technology Education
  68. A compliance-based ranking of certificate authorities using probabilistic approaches
    Kashif Junaid, Muhammad Umar Janjua, Junaid Qadir · 2024 · International Journal of Information Security
  69. Análisis de Protocolos Transport Layer Security y Secure Socket Layer como mecanismos de seguridad y competitividad en las organizaciones digitales
    Antonio Flores, Marvin Llerena · 2024 · Technological Innovations Journal
  70. Analyzing shared keys in X.509 certificates with domain ownership
    Kashif Junaid, Muhammad Umar Janjua · 2025 · International Journal of Information Security
  71. A Semi-decentralized PKI Based on Blockchain with Identity Retention
    Hoang-Nam Dinh, Ba-Lam Do · 2025 · Lecture notes in networks and systems
  72. DRL-DPKI: A malicious behavior mitigation and quality-aware load balancing algorithm for decentralized PKI
    Yu Wang, Xiaofei Xing, Peiqiang Li, Yuheng Zhang, Guojun Wang · 2026 · Journal of Systems Architecture
  73. Mutual zero-knowledge authentication based on virtual passwords per session (MAVPS)
    Younes Asimi, Abdellah Amghar, Ahmed Asimi, Yassine Sadqi · 2014 · World Conference on Complex Systems
  74. The Design and Implementation of Blockchain-Assisted User Public-Private Key Generation Method
    Tianhong Zhang, Zejun Lan, Xianming Gao, Jianfeng Guan · 2022 · Communications in computer and information science
  75. Analysis of Hypertext Transfer Protocol and Its Variants
    Aakanksha Aakanksha, Bhawna Jain, Dinika Saxena, Disha Sahni, Pooja Sharma · 2018 · Advances in intelligent systems and computing
  76. Ghazal: Toward Truly Authoritative Web Certificates Using Ethereum
    Seyedehmahsa Moosavi, Jeremy Clark · 2019 · Lecture notes in computer science
  77. Analyzing the Browser Security Warnings on HTTPS Errors
    Congli Wang, Jingqiang Lin, Bingyu Li, Qi Lecky Li, Qiongxiao Wang, Xiaokun Zhang · 2019 · International Conference on Communications
  78. Ghost Trace on the Wire? Using Key Evidence for Informed Decisions
    Diana A. Vasile, Martin Kleppmann, Daniel Thomas, Alastair R. Beresford · 2020 · Lecture notes in computer science
  79. Developing Privacy Extensions: Is it Advocacy through the Web Browser?
    Karen Louise Smith, Elysia Guzik · 2022 · Surveillance & Society
  80. Information Security
    Yvo Desmedt · 2015 · Lecture notes in computer science
  81. Understanding User-Level IP Blocks on the Internet
    Yimo Ren, Hong Li, Ruinian Li, Hongsong Zhu, Limin Sun · 2022 · Security and Communication Networks
  82. Design and Analysis of Secure Exam Protocols
    Giustolisi, Rosario · 2015 · arXiv (Cornell University)
  83. At Least Tell Me: User Attitudes Toward the Inspection of Encrypted Traffic
    Scott Ruoti, Mark O'Neill, Daniel Zappala, Kent E. Seamons · 2015 · arXiv (Cornell University)
  84. Mitigating private key compromise
    Jiangshan Yu · 2016 · University of Birmingham Institutional Research Archive (University of Birmingham)
  85. New Formulas for Semi-Primes. Testing, Counting and Identification of the $n^{th}$ and next Semi-Primes
    Issam Kaddoura, Samih Abdul-Nabi, Khadija Al-Akhrass · 2016 · arXiv (Cornell University)
  86. Safe-record : segurança e privacidade para registros eletrônicos em saúde na nuvem
    Stefano M P C Souza · 2016
  87. Analysis and Automated Discovery of Attacks in Transport Protocols
    Samuel Jero · 2018 · Purdue e-Pubs (Purdue University System)
  88. Last-Mile TLS Interception: Analysis and Observation of the Non-Public HTTPS Ecosystem
    Xavier de Carné de Carnavalet · 2019 · Spectrum Research Repository (Concordia University)
  89. Server Notaries: A Complementary Approach to the Web PKI Trust Model.
    Emre Yüce, Ali Aydın Selçuk · 2016 · IACR Cryptology ePrint Archive
  90. SoK: Securing Email -- A Stakeholder-Based Analysis (Extended Version)
    Jeremy Clark, Paul C. van Oorschot, Scott Ruoti, Kent E. Seamons, Daniel Zappala · 2018 · arXiv (Cornell University)
  91. On Security Best Practices, Systematic Analysis of Security Advice, and Internet of Things Devices
    Christopher Bellman · 2022
  92. Cyber Threat Intelligence with Symmetry for Zero-Trust Security
    Pedro Ramos Brandão · 2025 · Preprints.org
  93. Privilege-Based Scoring System Against Cross-Site Scripting Using Machine Learning
    N. Shyam Sunder, T. Gireesh Kumar · 2016 · Advances in intelligent systems and computing
  94. To Trust, or not to Trust, that is the Question: Structural Properties of X.509 Certificates.
    Johanna Amann, Robin Sommer, Matthias Vallentin, Seth Hall · 2015 · Tiny Trans. Comput. Sci.
  95. A network monitor for HTTPS protocol based on proxy
    Yangxin Liu, Lingcui Zhang, Shuguang Zhou, Fenghua Li · 2016 · Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE
  96. Intelligent two-factor authentication – Deciding authentication requirements using historical context data
    Olli Jarva · 2014
  97. E-SSL: An SSL Security-Enhanced Method for Bypassing MITM Attacks in Mobile Internet
    Ren Zhao, Xiaohong Li, Guangquan Xu, Zhiyong Feng, Jianye Hao · 2017 · Lecture notes in computer science
  98. The State of Man-in-the-Middle TLS Proxies: Prevalence and User Attitudes
    Mark O'Neill · 2016 · ScholarsArchive (Brigham Young University)
  99. CAre: Certificate Authority Rescue Engine for Proactive Security
    Jake A. Berkowsky, Neha A. Rana, Thaier S. Hayajneh · 2017 · International Symposium on Pervasive Systems, Algorithms and Networks (ISPAN)
  100. Reevaluating the effectiveness of visual cues for website security
    Neha A. Rana, Thaier S. Hayajneh · 2017 · IEEE Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON)