PoliCert: Secure and Flexible TLS Certificate Management

No abstract is available for this paper.

• Publication year

  2014

• Venue

  Conference on Computer and Communications Security

• Publication date

  2014-11-03

• Fields of study

  Computer Science, Engineering

• Identifiers
  DOI 10.1145/2660267.2660355
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• DNS Certification Authority Authorization (CAA) Resource Record

  2019cited by this paper
• Selecting elliptic curves for cryptography: an efficiency and security analysis

  2016cited by this paper
• Public Key Pinning Extension for HTTP

  2015cited by this paper
• ARPKI: Attack Resilient Public-Key Infrastructure

  2014influential reference
• Certificate Transparency

  2014cited by this paper
• Experimenting at scale with google chrome's SSL warning

  2014cited by this paper
• Enhanced certificate transparency (how Johnny could encrypt)

  2013influential reference
• Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness

  2013cited by this paper
• Evolving the Web Public Key Infrastructure

  2013cited by this paper
• CAge: Taming Certificate Authorities by Inferring Restricted Scopes

  2013cited by this paper
• Elligator: elliptic-curve points indistinguishable from uniform random strings

  2013cited by this paper
• Search for Trust: An Analysis and Comparison of CA System Alternatives and Enhancements

  2012cited by this paper
• Fast Elliptic Curve Cryptography in OpenSSL

  2011cited by this paper
• Certified Lies: Detecting and Defeating Government Interception Attacks against SSL (Short Paper)

  2011cited by this paper
• Efficient Data Structures For Tamper-Evident Logging

  2009cited by this paper
• ECRYPT yearly report on algorithms and keysizes

  2009cited by this paper
• Perspectives: Improving SSH-style Host Authentication with Multi-Path Probing

  2008cited by this paper
• Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

  2008cited by this paper
• Quantifying interactive user experience on thin clients

  2006cited by this paper
• Transport Layer Security (TLS) Extensions

  2003cited by this paper
• A key-management scheme for distributed sensor networks

  2002influential reference
• Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

  2002cited by this paper
• Convergence.

  2000cited by this paper
• A Digital Signature Based on a Conventional Encryption Function

  1987cited by this paper
• Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, CHI 1985, San Francisco, California, USA, 1985

  1985cited by this paper
• 2013 IEEE Symposium on Security and Privacy SoK: SSL and HTTPS: Revisiting past challenges and evaluating certificate trust model enhancements

  year unknowncited by this paper

• PKChain: Compromise-Tolerant and Verifiable Public Key Management System

  2025cites this paper
• Decentralized PKI Framework for Data Integrity in Spatial Crowdsourcing Drone Services

  2024cites this paper
• Provable Security for PKI Schemes

  2024cites this paper
• A Semi-Decentralized PKI Based on Blockchain With a Stake-Based Reward-Punishment Mechanism

  2024cites this paper
• Investigate and Improve the Certificate Revocation in Web PKI

  2024cites this paper
• Design and Implementation of Security Gatway for IoT Devices Security

  2023cites this paper
• T-FIM: Transparency in Federated Identity Management for Decentralized Trust and Forensics Investigation

  2023cites this paper
• Semi-CT: Certificates Transparent to Identity Owners but Opaque to Snoopers

  2023cites this paper
• Decentralized Compromise-Tolerant Public Key Management Ecosystem with Threshold Validation

  2023cites this paper
• BRT: An Efficient and Scalable Blockchain-Based Revocation Transparency System for TLS Connections

  2023cites this paper
• A Survey on X.509 Public-Key Infrastructure, Certificate Revocation, and Their Modern Implementation on Blockchain and Ledger Technologies

  2023cites this paper
• LRS_PKI: A novel blockchain-based PKI framework using linkable ring signatures

  2023cites this paper
• Accountable Bootstrapping Based on Attack Resilient Public Key Infrastructure and Secure Zero Touch Provisioning

  2022cites this paper
• Secure and Efficient Multi-Signature Schemes for Fabric: An Enterprise Blockchain Platform

  2022cites this paper
• Hammurabi: A Framework for Pluggable, Logic-Based X.509 Certificate Validation Policies

  2022cites this paper
• Smart contract assisted blockchain based public key infrastructure system

  2022cites this paper
• Understanding User-Level IP Blocks on the Internet

  2022cites this paper
• Smart Contract Assisted Blockchain based PKI System

  2022cites this paper
• When PKI (finally) met Provable Security

  2021cites this paper
• Pistis: Issuing Trusted and Authorized Certificates with Distributed Ledger and TEE

  2021influential citation
• F-PKI: Enabling Innovation and Trust Flexibility in the HTTPS Public-Key Infrastructure

  2021cites this paper
• CTng: Secure Certificate and Revocation Transparency

  2021cites this paper
• Experiences Deploying Multi-Vantage-Point Domain Validation at Let's Encrypt

  2021cites this paper
• CTng: Secure Certificate and Revocation Transparency

  2021cites this paper
• Merkle2: A Low-Latency Transparency Log System

  2021cites this paper
• Design and Implementation of Raspberry House: An IoT Security Framework

  2021cites this paper
• Locally-Centralized Certificate Validation and its Application in Desktop Virtualization Systems

  2021cites this paper
• Information Security and Cryptology: 15th International Conference, Inscrypt 2019, Nanjing, China, December 6–8, 2019, Revised Selected Papers

  2020cites this paper
• BB-PKI: Blockchain-Based Public Key Infrastructure Certificate Management

  2020influential citation
• A decentralized dynamic PKI based on blockchain

  2020cites this paper
• CAPS: Smoothly Transitioning to a More Resilient Web PKI

  2020cites this paper
• DomainPKI: Domain Aware Certificate Management

  2020cites this paper
• Provably Secure PKI Schemes

  2020cites this paper
• SCM: Secure and accountable TLS certificate management

  2020cites this paper
• Blockchain-based trust establishment mechanism in the internet of multimedia things

  2020cites this paper
• Attack-Resilient TLS Certificate Transparency

  2020influential citation
• SmartCert: Redesigning Digital Certificates with Smart Contracts

  2020cites this paper
• Effective and Practical Improvements to the Web Public-Key Infrastructure

  2019influential citation
• Transparency Logs via Append-Only Authenticated Dictionaries

  2019cites this paper
• Financial Cryptography and Data Security: FC 2018 International Workshops, BITCOIN, VOTING, and WTSC, Nieuwpoort, Curaçao, March 2, 2018, Revised Selected Papers

  2019cites this paper
• A metric to assess the trustworthiness of certificate authorities

  2019cites this paper
• Proxy Certificates: The Missing Link in the Web's Chain of Trust

  2019cites this paper
• Certificate Transparency in the Wild: Exploring the Reliability of Monitors

  2019cites this paper
• Towards the Trust-Enhancements of Single Sign-On Services

  2019influential citation
• Elaphurus: Ensemble Defense Against Fraudulent Certificates in TLS

  2019cites this paper
• SoK: Delegation and Revocation, the Missing Links in the Web's Chain of Trust

  2019cites this paper
• Turning Trust Around: Smart Contract-Assisted Public Key Infrastructure

  2018cites this paper
• DECIM: Detecting Endpoint Compromise In Messaging

  2018cites this paper
• A Metapolicy Framework for Enhancing Domain Expressiveness on the Internet

  2018influential citation
• Towards Sustainable Evolution for the TLS Public-Key Infrastructure

  2018cites this paper
• Security and Privacy in Communication Networks

  2018influential citation
• Certificate Transparency Using Blockchain

  2018cites this paper
• Domain Validation++ For MitM-Resilient PKI

  2018cites this paper
• Certi cate Transparency Using

  2018cites this paper
• Blockchain-Based Certificate Transparency and Revocation Transparency

  2018cites this paper
• On the Feasibility of Fine-Grained TLS Security Configurations in Web Browsers Based on the Requested Domain Name

  2018influential citation
• CertChain: Public and Efficient Certificate Audit Based on Blockchain for TLS Connections

  2018cites this paper
• Detecting and Defending Against Certificate Attacks with Origin-Bound CAPTCHAs

  2018cites this paper
• New Directions for Trust in the Certificate Authority Ecosystem

  2018cites this paper
• IKP: Turning a PKI Around with Decentralized Automated Incentives

  2017cites this paper
• Multiple Objectives of Lawful-Surveillance Protocols (Transcript of Discussion)

  2017cites this paper
• HSTS Measurement and an Enhanced Stripping Attack Against HTTPS

  2017cites this paper
• Checks and balances: A tripartite public key infrastructure for secure web-based connections

  2017cites this paper
• CRLite: A Scalable System for Pushing All TLS Revocations to All Browsers

  2017cites this paper
• SCION: A Secure Internet Architecture

  2017cites this paper
• Key Exchange with the Help of a Public Ledger

  2017cites this paper
• Authentication Challenges in a Global Environment

  2017influential citation
• Key Exchange with the Help of a Public Ledger (Transcript of Discussion)

  2017cites this paper
• Security Protocols XXV

  2017cites this paper
• Measuring and Applying Invalid SSL Certificates: The Silent Majority

  2016cites this paper
• Design, Analysis, and Implementation of ARPKI: An Attack-Resilient Public-Key Infrastructure

  2016cites this paper
• PKI Safety Net (PKISN): Addressing the Too-Big-to-Be-Revoked Problem of the TLS Ecosystem

  2016cites this paper
• Application of Public Ledgers to Revocation in Distributed Access Control

  2016cites this paper
• Cinderella: Turning Shabby X.509 Certificates into Elegant Anonymous Credentials with the Magic of Verifiable Computation

  2016cites this paper
• RITM: Revocation in the Middle

  2016cites this paper
• Cookie-Based Identification of the Public Keys of TLS/SSL Certificates

  2016cites this paper
• Certificate Transparency in Theory and Practice

  2016cites this paper
• IKP: Turning a PKI Around with Blockchains

  2016influential citation
• On the security of authentication protocols on the web. (La sécurité des protocoles d'authentification sur leWeb)

  2016cites this paper
• Designing a Global Authentication Infrastructure

  2015cites this paper
• An End-to-End Measurement of Certificate Revocation in the Web's PKI

  2015cites this paper
• Keeping Authorities "Honest or Bust" with Decentralized Witness Cosigning

  2015influential citation
• Certificates-as-an-Insurance: Incentivizing Accountability in SSL/TLS

  2015cites this paper
• Deployment challenges in log-based PKI enhancements

  2015influential citation
• Certificate Cothority : Towards Trustworthy Collective CAs

  2015cites this paper
• SCION Five Years Later: Revisiting Scalability, Control, and Isolation on Next-Generation Networks

  2015cites this paper
• Domain Based Certification and Revocation

  2015cites this paper
• Efficient gossip protocols for verifying the consistency of Certificate logs

  2015cites this paper
• Certification with Multiple Signatures

  2015cites this paper
• Decentralizing Authorities into Scalable Strongest-Link Cothorities

  2015cites this paper
• How to Misuse SMTP over TLS: A Study of the (In) Security of Email Server Communication

  2015cites this paper
• Recent Advances in PKI Technologies

  2015cites this paper
• ARPKI: Attack Resilient Public-Key Infrastructure

  2014cites this paper
• The Invisible Side of Certificate Transparency: Exploring the Reliability of Monitors in the Wild

  year unknowncites this paper