Work

Crowdsourced Distributed Domain Validation

Year: 2024

Type: conference-paper

Abstract: Domain validation is the primary method used by Certificate Authorities for affirming administrative control over a domain for issuing TLS certificates. Prior work has repeatedly shown its vulnerability to hijacking, prompting the use of multiple vantage points for validation. However, the use of static vantage points, as in Let's Encrypt's MultiVA system, is still subject to targeted attacks. Validators should therefore be both distributed and selected in an unpredictable fashion, which is expensive to achieve with dedicated infrastructure.

Source: ACM Workshop on Hot Topics in Networks (HotNets)

DOI: 10.1145/3696348.3696869

Authors: Jens Frieß, Haya Schulmann, Michael Waidner

Institutions: Technische Universität Darmstadt, National Research Center for Applied Cybersecurity ATHENE, Goethe University Frankfurt

Language: English

Topic: Advanced Authentication Protocols Security

Subfield: Computer Networks and Communications

Field: Computer Science

Domain: Physical Sciences

Open Access status: hybrid

OpenAlex ID: W4404240244

FWCI: 0.462

Cites: 11

Cited by: 1

Related to: 10