NDLI: Restricting access with certificate attributes in multiple root environments

Content Provider	IEEE Xplore Digital Library
Author	Hayes, J.M.
Copyright Year	2001
Description	Author affiliation: Syst. & Network Attack Center, USAF, MD, USA (Hayes, J.M.)
Abstract	The issue of certificate masquerading against the SSL protocol is pointed out in Hayes (1998). In Hayes, various forms of server certificate masquerading are identified. It should also be noted that the attack described is a man-in-the-middle (MITM) attack that requires direct manipulation of the SSL protocol. This paper is a mirror of Hayes and involves client certificate masquerading. The motivation for this paper comes from the fact that this anomaly has shown up in commercial products. It is potentially more damaging than in Hayes since a MITM attack is not involved and the only requirement is that the application trust a given root certificate authority (CA). The problem arises when applications use multiple roots that do not cross-certify. The problem is further exacerbated since the applications themselves do not have the ability to apply external name constraints and policies. Unfortunately, the problem is a fairly well known problem, within the public key infrastructure (PKI) community, but continues to persist in practice despite this knowledge.
Sponsorship	Appl. Comput. Security Associates
Starting Page	386
Ending Page	390
File Size	171803
Page Count	5
File Format	PDF
ISBN	0769514057
DOI	10.1109/ACSAC.2001.991555
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2001-12-10
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Public key Certification Authentication Intelligent networks National security Access protocols Network servers Mirrors Internet Extranets
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Restricting access with certificate attributes in multiple root environments – a recipe for certificate masquerading.

Certificate management in ad hoc networks

Password-based independent authentication and key exchange protocol

The problem with multiple roots in Web browsers-certificate masquerading

Design choices for symmetric key based inter-domain authentication protocols in distributed systems

A Unified Approach to Intra-domain Security

Two-phase authentication protocol for wireless sensor networks in distributed IoT applications

Security for IoT: An effective DTLS with public certificates

A Wireless Mesh Network Authentication Method Based on Identity Based Signature

Restricting access with certificate attributes in multiple root environments - a recipe for certificate masquerading

Similar Documents

Restricting access with certificate attributes in multiple root environments – a recipe for certificate masquerading.

Certificate management in ad hoc networks

Password-based independent authentication and key exchange protocol

The problem with multiple roots in Web browsers-certificate masquerading

Design choices for symmetric key based inter-domain authentication protocols in distributed systems

A Unified Approach to Intra-domain Security

Two-phase authentication protocol for wireless sensor networks in distributed IoT applications

Security for IoT: An effective DTLS with public certificates

A Wireless Mesh Network Authentication Method Based on Identity Based Signature

Restricting access with certificate attributes in multiple root environments - a recipe for certificate masquerading