{"id":"https://openalex.org/W4321366477","doi":"https://doi.org/10.1109/tdsc.2023.3246600","title":"The Potential Harm of Email Delivery: Investigating the HTTPS Configurations of Webmail Services","display_name":"The Potential Harm of Email Delivery: Investigating the HTTPS Configurations of Webmail Services","publication_year":2023,"publication_date":"2023-02-21","ids":{"openalex":"https://openalex.org/W4321366477","doi":"https://doi.org/10.1109/tdsc.2023.3246600"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3246600","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3246600","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077244090","display_name":"Ruixuan Li","orcid":"https://orcid.org/0000-0002-0729-9661"},"institutions":[{"id":"https://openalex.org/I75059550","display_name":"Zhejiang Gongshang University","ror":"https://ror.org/0569mkk41","country_code":"CN","type":"education","lineage":["https://openalex.org/I75059550"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruixuan Li","raw_affiliation_strings":["School of Computer Science and Technology, Zhejiang Gongshang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-0729-9661","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Zhejiang Gongshang University, Hangzhou, China","institution_ids":["https://openalex.org/I75059550"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035143434","display_name":"Zhenyong Zhang","orcid":"https://orcid.org/0000-0003-0950-1525"},"institutions":[{"id":"https://openalex.org/I75059550","display_name":"Zhejiang Gongshang University","ror":"https://ror.org/0569mkk41","country_code":"CN","type":"education","lineage":["https://openalex.org/I75059550"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenyong Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Zhejiang Gongshang University, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Zhejiang Gongshang University, Hangzhou, China","institution_ids":["https://openalex.org/I75059550"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040489898","display_name":"Jun Shao","orcid":"https://orcid.org/0000-0001-8352-0973"},"institutions":[{"id":"https://openalex.org/I75059550","display_name":"Zhejiang Gongshang University","ror":"https://ror.org/0569mkk41","country_code":"CN","type":"education","lineage":["https://openalex.org/I75059550"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Shao","raw_affiliation_strings":["School of Computer Science and Technology, Zhejiang Gongshang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-8352-0973","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Zhejiang Gongshang University, Hangzhou, China","institution_ids":["https://openalex.org/I75059550"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070447777","display_name":"Rongxing Lu","orcid":"https://orcid.org/0000-0001-5720-0941"},"institutions":[{"id":"https://openalex.org/I106938459","display_name":"University of New Brunswick","ror":"https://ror.org/05nkf0n29","country_code":"CA","type":"education","lineage":["https://openalex.org/I106938459"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Rongxing Lu","raw_affiliation_strings":["Faculty of Computer Science, University of New Brunswick, Fredericton, Canada"],"raw_orcid":"https://orcid.org/0000-0001-5720-0941","affiliations":[{"raw_affiliation_string":"Faculty of Computer Science, University of New Brunswick, Fredericton, Canada","institution_ids":["https://openalex.org/I106938459"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015456692","display_name":"Xiaoqi Jia","orcid":"https://orcid.org/0000-0002-8376-3235"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoqi Jia","raw_affiliation_strings":["Key laboratory of network assessment technology, CAS (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key laboratory of network assessment technology, CAS (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080535529","display_name":"Guiyi Wei","orcid":"https://orcid.org/0000-0002-0635-2053"},"institutions":[{"id":"https://openalex.org/I75059550","display_name":"Zhejiang Gongshang University","ror":"https://ror.org/0569mkk41","country_code":"CN","type":"education","lineage":["https://openalex.org/I75059550"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guiyi Wei","raw_affiliation_strings":["School of Information and Electronic Engineering, Zhejiang Gongshang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-0635-2053","affiliations":[{"raw_affiliation_string":"School of Information and Electronic Engineering, Zhejiang Gongshang University, Hangzhou, China","institution_ids":["https://openalex.org/I75059550"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.0816,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.92374905,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"21","issue":"1","first_page":"125","last_page":"138"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9918000102043152,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9828000068664551,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6839522123336792},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.6803798079490662},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.599933385848999},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5987345576286316},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.5397831201553345},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.536236047744751},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.4982635974884033},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4386861026287079},{"id":"https://openalex.org/keywords/server-side","display_name":"Server-side","score":0.42844358086586},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4149578809738159},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.31200796365737915},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2305297553539276},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.21090197563171387}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6839522123336792},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.6803798079490662},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.599933385848999},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5987345576286316},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.5397831201553345},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.536236047744751},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.4982635974884033},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4386861026287079},{"id":"https://openalex.org/C14414571","wikidata":"https://www.wikidata.org/wiki/Q519081","display_name":"Server-side","level":2,"score":0.42844358086586},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4149578809738159},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.31200796365737915},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2305297553539276},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.21090197563171387},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C136264566","wikidata":"https://www.wikidata.org/wiki/Q159810","display_name":"Economy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3246600","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3246600","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W326302118","https://openalex.org/W1910624757","https://openalex.org/W1996430944","https://openalex.org/W2008251338","https://openalex.org/W2008524185","https://openalex.org/W2021327598","https://openalex.org/W2104899073","https://openalex.org/W2112736324","https://openalex.org/W2151269705","https://openalex.org/W2186028149","https://openalex.org/W2233063544","https://openalex.org/W2236904012","https://openalex.org/W2272023646","https://openalex.org/W2275000245","https://openalex.org/W2296570230","https://openalex.org/W2299781188","https://openalex.org/W2300554752","https://openalex.org/W2416597969","https://openalex.org/W2541921787","https://openalex.org/W2545990795","https://openalex.org/W2552873532","https://openalex.org/W2560520934","https://openalex.org/W2588121565","https://openalex.org/W2594194983","https://openalex.org/W2755252385","https://openalex.org/W2769047723","https://openalex.org/W2770959194","https://openalex.org/W2791124287","https://openalex.org/W2792818501","https://openalex.org/W2794584163","https://openalex.org/W2807817086","https://openalex.org/W2889666008","https://openalex.org/W2895807258","https://openalex.org/W2902352019","https://openalex.org/W2915352631","https://openalex.org/W3044183949","https://openalex.org/W3094918822","https://openalex.org/W4233819588","https://openalex.org/W4281622875","https://openalex.org/W4298051233","https://openalex.org/W4300164479","https://openalex.org/W6677217071","https://openalex.org/W6740744476","https://openalex.org/W6744286775","https://openalex.org/W6775961613","https://openalex.org/W6888881834"],"related_works":["https://openalex.org/W2770234245","https://openalex.org/W2366107444","https://openalex.org/W96612179","https://openalex.org/W4229499248","https://openalex.org/W2566006169","https://openalex.org/W2987774938","https://openalex.org/W4388145910","https://openalex.org/W4256492088","https://openalex.org/W632915154","https://openalex.org/W2055733372"],"abstract_inverted_index":{"Webmail,":[0],"protected":[1],"by":[2,124],"the":[3,11,21,28,39,49,79,83,95,126,132,156,179,183,187,196],"HTTPS":[4,188],"protocol,":[5],"only":[6,85],"works":[7],"correctly":[8],"if":[9],"both":[10],"server":[12,50],"and":[13,42,148],"client":[14,133],"implement":[15,137],"HTTPS-related":[16,129,139],"features":[17,26,115,140,185],"without":[18],"vulnerability.":[19],"Nevertheless,":[20],"deployment":[22,181],"situation":[23],"of":[24,45,62,94,128,138,145,182],"these":[25,106],"in":[27,141,168,195],"webmail":[29,46,69,108,197],"world":[30],"is":[31,190],"still":[32,191],"unclear.":[33],"To":[34],"this":[35],"end,":[36],"we":[37,52,66,111,120,135],"perform":[38],"first":[40,53],"end-to-end":[41],"large-scale":[43],"measurement":[44,104],"service.":[47,198],"For":[48,131,165],"side,":[51,134],"build":[54],"an":[55],"email":[56,80,98],"address":[57,81],"set":[58],"with":[59],"a":[60,102,192],"size":[61],"2.2":[63,96],"billion.":[64],"Then":[65],"construct":[67],"two":[68,107],"domain":[70,109],"datasets:":[71],"one":[72],"contains":[73],"21":[74],"k":[75],"domains":[76,88],"filtered":[77],"from":[78],"set;":[82],"other":[84],"includes":[86],"34":[87],"but":[89],"supports":[90],"more":[91],"than":[92],"75%":[93],"billion":[97],"addresses.":[99],"After":[100],"performing":[101],"comprehensive":[103],"on":[105],"datasets,":[110],"find":[112,153],"that":[113,154,178],"some":[114,163],"are":[116],"poorly":[117],"deployed.":[118],"Furthermore,":[119],"also":[121],"rank":[122],"servers":[123],"analyzing":[125],"properties":[127],"features.":[130,164],"investigate":[136],"50":[142],"different":[143],"combinations":[144],"web":[146],"browsers":[147,158],"operating":[149],"systems":[150],"(OSes).":[151],"We":[152],"even":[155,194],"latest":[157],"have":[159],"poor":[160],"support":[161,173],"for":[162,186],"example,":[166],"Firefox":[167],"all":[169],"OSes":[170],"does":[171],"not":[172],"CT.":[174],"Our":[175],"findings":[176],"highlight":[177],"full":[180],"security":[184],"ecosystem":[189],"challenge,":[193]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}