On the Validation of Web X.509 Certificates by TLS interception products - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue IEEE Transactions on Dependable and Secure Computing Année : 2022

On the Validation of Web X.509 Certificates by TLS interception products

Résumé

The Transport Layer Security (TLS) protocol aims to provide confidentiality and integrity of data. It is based on X.509 Certificates. Our previous research showed that popular Web Browsers exhibit non-standardized behaviour with respect to the certificate validation process [1]. This paper extends that work by examining their handling of OCSP Stapling. We also examine several popular HTTPS interception products, including proxies and anti-virus tools, regarding their certificate validation processes. We analyse and compare their behaviour to that described in the relative standards.
Fichier principal
Vignette du fichier
09110796.pdf (1.14 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-02863329 , version 1 (10-06-2020)

Identifiants

Citer

Ahmad Samer Wazan, Romain Laborde, David Chadwick, Rémi Venant, Abdelmalek Benzekri, et al.. On the Validation of Web X.509 Certificates by TLS interception products. IEEE Transactions on Dependable and Secure Computing, 2022, 19 (1), pp.227 - 242. ⟨10.1109/TDSC.2020.3000595⟩. ⟨hal-02863329⟩
190 Consultations
149 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More