One year of SSL internet measurement - Archive ouverte HAL
Communication Dans Un Congrès ACSAC '12 : 28th Annual Computer Security Applications Conference Année : 2012

One year of SSL internet measurement

Résumé

Over the years, SSL/TLS has become an essential part of internet security. As such, it should offer robust and state-of-the-art security, in particular for HTTPS, its first application. Theoretically, the protocol allows for a trade-off between secure algorithms and decent performance. Yet in practice, servers do not always support the latest version of the protocol, nor do they all enforce strong cryptographic algorithms. To assess the quality of HTTPS servers in the wild, we enumerated HTTPS servers on the internet in July 2010 and July 2011. We sent several stimuli against the servers to gather detailed information. We then analysed some parameters of the collected data and looked at how they evolved. We also focused on two subsets of the TLS hosts within our measure: the trusted hosts (possessing a valid certificate at the time of the probing) and EV hosts (presenting a trusted, so-called Extended Validation certificate). Our contributions rely on this methodology: the stimuli we sent, the criteria we studied and the subsets we focused on. Moreover, even if EV servers present a somewhat improved certificate quality over the TLS hosts, we show they do not offer overall high quality sessions, which could and should be improved.
Fichier non déposé

Dates et versions

hal-00768258 , version 1 (21-12-2012)

Identifiants

  • HAL Id : hal-00768258 , version 1

Citer

Olivier Levillain, Arnaud Ebalard, Benjamin Morin, Hervé Debar. One year of SSL internet measurement. ACSAC '12 : 28th Annual Computer Security Applications Conference, Dec 2012, Orlando, United States. pp.11-20. ⟨hal-00768258⟩
112 Consultations
0 Téléchargements

Partager

More