How to Measure TLS, X.509 Certificates, and Web PKI: A Tutorial and Brief Survey
Fuente:
arXiv
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866909089476378624 |
|---|---|
| author | Tehrani, Pouyan Fotouhi Osterweil, Eric Schmidt, Thomas C. Wählisch, Matthias |
| author_facet | Tehrani, Pouyan Fotouhi Osterweil, Eric Schmidt, Thomas C. Wählisch, Matthias |
| contents | Transport Layer Security (TLS) is the base for many Internet applications and services to achieve end-to-end security. In this paper, we provide guidance on how to measure TLS deployments, including X.509 certificates and Web PKI. We introduce common data sources and tools, and systematically describe necessary steps to conduct sound measurements and data analysis. By surveying prior TLS measurement studies we find that diverging results are rather rooted in different setups instead of different deployments. To improve the situation, we identify common pitfalls and introduce a framework to describe TLS and Web PKI measurements. Where necessary, our insights are bolstered by a data-driven approach, in which we complement arguments by additional measurements. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2401_18053 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | How to Measure TLS, X.509 Certificates, and Web PKI: A Tutorial and Brief Survey Tehrani, Pouyan Fotouhi Osterweil, Eric Schmidt, Thomas C. Wählisch, Matthias Networking and Internet Architecture Cryptography and Security Transport Layer Security (TLS) is the base for many Internet applications and services to achieve end-to-end security. In this paper, we provide guidance on how to measure TLS deployments, including X.509 certificates and Web PKI. We introduce common data sources and tools, and systematically describe necessary steps to conduct sound measurements and data analysis. By surveying prior TLS measurement studies we find that diverging results are rather rooted in different setups instead of different deployments. To improve the situation, we identify common pitfalls and introduce a framework to describe TLS and Web PKI measurements. Where necessary, our insights are bolstered by a data-driven approach, in which we complement arguments by additional measurements. |
| title | How to Measure TLS, X.509 Certificates, and Web PKI: A Tutorial and Brief Survey |
| topic | Networking and Internet Architecture Cryptography and Security |
| url | https://arxiv.org/abs/2401.18053 |