NDLI: Trust me, I'm a Root CA! Analyzing SSL Root CAs in Modern Browsers and Operating Systems

Content Provider	IEEE Xplore Digital Library
Author	Fadai, T. Schrittwieser, S. Kieseberg, P. Mulazzani, M.
Copyright Year	2015
Description	Author affiliation: SBA Res., Vienna, Austria (Kieseberg, P.; Mulazzani, M.) \|\| St. Polten Univ. of Appl. Sci., St. Polten, Austria (Fadai, T.; Schrittwieser, S.)
Abstract	The security and privacy of our online communications heavily relies on the entity authentication mechanisms provided by SSL. Those mechanisms in turn heavily depend on the trustworthiness of a large number of companies and governmental institutions for attestation of the identity of SSL services providers. In order to offer a wide and unobstructed availability of SSL-enabled services and to remove the need to make a large amount of trust decisions from their users, operating systems and browser manufactures include lists of certification authorities which are trusted for SSL entity authentication by their products. This has the problematic effect that users of such browsers and operating systems implicitly trust those certification authorities with the privacy of their communications while they might not even realize it. The problem is further complicated by the fact that different software vendors trust different companies and governmental institutions, from a variety of countries, which leads to an obscure distribution of trust. To give insight into the trust model used by SSL this thesis explains the various entities and technical processes involved in establishing trust when using SSL communications. It furthermore analyzes the number and origin of companies and governmental institutions trusted by various operating systems and browser vendors and correlates the gathered information to a variety of indexes to illustrate that some of these trusted entities are far from trustworthy. Furthermore it points out the fact that the number of entities we trust with the security of our SSL communications keeps growing over time and displays the negative effects this might have as well as shows that the trust model of SSL is fundamentally broken.
Starting Page	174
Ending Page	179
File Size	211160
Page Count	6
File Format	PDF
e-ISBN	9781467365901
DOI	10.1109/ARES.2015.93
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-08-24
Publisher Place	France
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	trust Operating systems Government Companies Browsers Internet Security Indexes CA PKI
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Trust me, I’m a Root CA! Analyzing SSL Root CAs in modern Browsers and Operating Systems

Research on E-Government Security Model

Research on Trust Model of PKI

The Potential of an Individualized Set of Trusted CAs: Defending against CA Failures in the Web PKI

The potential of an individualized set of trusted cas: defending against ca failures in the web pki (extended version) ⋆.

Security analysis and configuration of SSL protocol

Towards a Semantics of Phish

A New Trust Model for PKI Interoperability

The potential of individualized trusted root stores: minimizing the attack surface in the light of ca failures.

Trust me, I'm a Root CA! Analyzing SSL Root CAs in Modern Browsers and Operating Systems

Similar Documents

Trust me, I’m a Root CA! Analyzing SSL Root CAs in modern Browsers and Operating Systems

Research on E-Government Security Model

Research on Trust Model of PKI

The Potential of an Individualized Set of Trusted CAs: Defending against CA Failures in the Web PKI

The potential of an individualized set of trusted cas: defending against ca failures in the web pki (extended version) ⋆.

Security analysis and configuration of SSL protocol

Towards a Semantics of Phish

A New Trust Model for PKI Interoperability

The potential of individualized trusted root stores: minimizing the attack surface in the light of ca failures.

Trust me, I'm a Root CA! Analyzing SSL Root CAs in Modern Browsers and Operating Systems