On the Validation of Web X.509 Certificates by TLS interception products

The Transport Layer Security (TLS) protocol aims to provide confidentiality and integrity of data. It is based on X.509 Certificates. Our previous research showed that popular Web Browsers exhibit non-standardized behaviour with respect to the certificate validation process [1]. This paper extends that work by examining their handling of OCSP Stapling. We also examine several popular HTTPS interception products, including proxies and anti-virus tools, regarding their certificate validation processes. We analyse and compare their behaviour to that described in the relative standards.

Mots clés

Certificate Validation X509 Certificate Web PKI OCSP Stapling

Domaines

Cryptographie et sécurité [cs.CR]

Fichier principal

09110796.pdf (1.14 Mo)

Origine	Fichiers produits par l'(les) auteur(s)

ABDELMALEK BENZEKRI : Connectez-vous pour contacter le contributeur

https://hal.science/hal-02863329

Soumis le : mercredi 10 juin 2020-10:20:09

Dernière modification le : lundi 23 septembre 2024-11:22:37

Dates et versions

hal-02863329 , version 1 (10-06-2020)

Identifiants

HAL Id : hal-02863329 , version 1
DOI : 10.1109/TDSC.2020.3000595

Citer

Ahmad Samer Wazan, Romain Laborde, David Chadwick, Rémi Venant, Abdelmalek Benzekri, et al.. On the Validation of Web X.509 Certificates by TLS interception products. IEEE Transactions on Dependable and Secure Computing, 2022, 19 (1), pp.227 - 242. ⟨10.1109/TDSC.2020.3000595⟩. ⟨hal-02863329⟩

Exporter

BibTeX XML-TEI Dublin Core DC Terms EndNote DataCite

Collections

UNIV-TLSE2 CNRS UT1-CAPITOLE IRIT IRIT-SIERA IRIT-ASR IRIT-UT3 TOULOUSE-INP UNIV-UT3 UT3-TOULOUSEINP IUT_UT3

244 Consultations

235 Téléchargements