Certificate Transparency-Reference-Cited by-同舟云学术

Certificate Transparency

Published:2014-08 Issue:8 Volume:12 Page:10-19
ISSN:1542-7730
Container-title:Queue
language:en
Short-container-title:Queue

Author:

Laurie Ben¹

Affiliation:

1. Google

Abstract

On August 28, 2011, a mis-issued wildcard HTTPS certificate for google.com was used to conduct a man-in-the-middle attack against multiple users in Iran. The certificate had been issued by a Dutch CA (certificate authority) known as DigiNotar, a subsidiary of VASCO Data Security International. Later analysis showed that DigiNotar had been aware of the breach in its systems for more than a month - since at least July 19. It also showed that at least 531 fraudulent certificates had been issued. The final count may never be known, since DigiNotar did not have records of all the mis-issued certificates. On September 20, 2011, DigiNotar was declared bankrupt.

Publisher

Association for Computing Machinery (ACM)

Subject

General Computer Science

Link

https://dl.acm.org/doi/pdf/10.1145/2668152.2668154

Reference4 articles.

1. Comodo Group. Update 31-MAR-2011; https://www.comodo.com/Comodo-Fraud-Incident-2011-03-23.html. Comodo Group. Update 31-MAR-2011; https://www.comodo.com/Comodo-Fraud-Incident-2011-03-23.html.

2. Langley A. 2013. Enhancing digital certificate security. Google Online Security Blog; http://googleonlinesecurity.blogspot.de/2013/01/enhancing-digital-certificate-security.html. Langley A. 2013. Enhancing digital certificate security. Google Online Security Blog; http://googleonlinesecurity.blogspot.de/2013/01/enhancing-digital-certificate-security.html.

3. Langley A. 2013. Further improving digital certificate security. Google Online Security Blog; http://googleonlinesecurity.blogspot.co.uk/2013/12/further-improving-digital-certificate.html. Langley A. 2013. Further improving digital certificate security. Google Online Security Blog; http://googleonlinesecurity.blogspot.co.uk/2013/12/further-improving-digital-certificate.html.

4. Laurie B. 2011. Improving SSL certificate security. Google Online Security Blog; http://googleonlinesecurity.blogspot.co.uk/2011/04/improving-ssl-certificate-security.html. Laurie B. 2011. Improving SSL certificate security. Google Online Security Blog; http://googleonlinesecurity.blogspot.co.uk/2011/04/improving-ssl-certificate-security.html.

Cited by 26 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. dNextG: A Zero-Trust Decentralized Mobile Network User Plane;Proceedings of the 19th ACM International Symposium on QoS and Security for Wireless and Mobile Networks;2023-10-30

2. Socio-Technical Principles of Decentralized Protocol Design;2023 Fifth International Conference on Blockchain Computing and Applications (BCCA);2023-10-24

3. Examining the Impact of Provenance-Enabled Media on Trust and Accuracy Perceptions;Proceedings of the ACM on Human-Computer Interaction;2023-09-28

4. A Certificate Management Mechanism Using Distributed Ledger;2023 18th Asia Joint Conference on Information Security (AsiaJCIS);2023-08-15

5. CLedger: A Secure Distributed Certificate Ledger via Named Data;ICC 2023 - IEEE International Conference on Communications;2023-05-28