The DOI matches its Crossref record; 21 of the 21 references it cites were found in a registry or an index.
Analysis of the HTTPS certificate ecosystem
Open accessAbstract
We report the results of a large-scale measurement study of the HTTPS certificate ecosystem---the public-key infrastructure that underlies nearly all secure web communications. Using data collected by performing 110 Internet-wide scans over 14 months, we gain detailed and temporally fine-grained visibility into this otherwise opaque area of security-critical infrastructure. We investigate the trust relationships among root authorities, intermediate authorities, and the leaf certificates used by web servers, ultimately identifying and classifying more than 1,800 entities that are able to issue certificates vouching for the identity of any website. We uncover practices that may put the security of the ecosystem at risk, and we identify frequent configuration problems that lead to user-facing errors and potential vulnerabilities. We conclude with lessons and recommendations to ensure the long-term health and security of the certificate ecosystem.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The Transport Layer Security (TLS) Protocol Version 1.1
Dierks, T., & Rescorla, E. (2006) · doi:10.17487/rfc4346 · Cited by 2,278
Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Housley, R., Polk, W., Ford, W., & Solo, D. (2002) · doi:10.17487/rfc3280 · Cited by 1,306
Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Cooper, D., Santesson, S., Farrell, S., Boeyen, S., Housley, R., & Polk, W. (2008) · doi:10.17487/rfc5280 · Cited by 1,075
Internet X.509 Public Key Infrastructure Certificate and CRL Profile
Housley, R., Ford, W., Polk, W., & Solo, D. (1999) · doi:10.17487/rfc2459 · Cited by 837
Proceedings of the 22nd international conference on World Wide Web
(2013) · doi:10.1145/2488388 · Cited by 685
ZMap: fast internet-wide scanning and its security applications
Durumeric, Z., Wustrow, E., & Halderman, J. A. (2013) · Cited by 652
Self-citationRecommendation for key management, part 1: general (revised)
Barker, E. B., Barker, W. C., Burr, W. E., Polk, W. T., & Smid, M. E. (2007) · doi:10.6028/nist.sp.800-57p1r2007 · Cited by 456
Factorization of a 768-Bit RSA Modulus
Kleinjung, T., Aoki, K., Franke, J., Lenstra, A. K., Thomé, E., Bos, J. W., Gaudry, P., Kruppa, A., Montgomery, P. L., Osvik, D. A., et al. (2010) · Lecture Notes in Computer Science · doi:10.1007/978-3-642-14623-7_18 · Cited by 423
SSL and TLS: Designing and Building Secure Systems
Rescorla, E. (2000) · Cited by 420
Recommendation for Key Management Part 1: General
Barker, E. (2016) · doi:10.6028/nist.sp.800-57pt1r4 · Cited by 396
Cited by
Durumeric, Z., Li, F., Kasten, J., Amann, J., Beekman, J., Payer, M., Weaver, N., Adrian, D., Paxson, V., Bailey, M., et al. (2014) · Proceedings of the 2014 Conference on Internet Measurement Conference · doi:10.1145/2663716.2663755 · Cited by 668
Self-citationA Review of Blockchain Architecture and Consensus Protocols: Use Cases, Challenges, and Solutions
Ismail, L., & Materwala, H. (2019) · Symmetry · doi:10.3390/sym11101198 · Cited by 278
Brubaker, C., Jana, S., Ray, B., Khurshid, S., & Shmatikov, V. (2014) · 2014 IEEE Symposium on Security and Privacy · doi:10.1109/sp.2014.15 · Cited by 218
Towards a Complete View of the Certificate Ecosystem
VanderSloot, B., Amann, J., Bernhard, M., Durumeric, Z., Bailey, M., & Halderman, J. A. (2016) · Proceedings of the 2016 Internet Measurement Conference · doi:10.1145/2987443.2987462 · Cited by 82
Self-citation
Metadata
- Authors
- Durumeric, Z., Kasten, J., Bailey, M., & Halderman, J. A.
- Venue
- Proceedings of the 2013 conference on Internet measurement conference
- Publisher
- ACM
- Published
- 2013-10-23
- Pages
- 291-304
- OpenAlex
- W2104899073
- Cited by
- 286
- References
- 21
- FWCI
- 20.18
- Type
- conference paper
- Language
- en
- Open access
- gold
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Analysis of the HTTPS certificate ecosystem. https://app.cochat.ai/papers/10.1145/2504730.2504755
- The paper
- Durumeric, Z., Kasten, J., Bailey, M., & Halderman, J. A. (2013). Analysis of the HTTPS certificate ecosystem. Proceedings of the 2013 conference on Internet measurement conference. https://doi.org/10.1145/2504730.2504755
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
