{"id":"https://openalex.org/W2769473656","doi":"https://doi.org/10.1145/3152434.3152444","title":"The Case For Secure Delegation","display_name":"The Case For Secure Delegation","publication_year":2017,"publication_date":"2017-11-27","ids":{"openalex":"https://openalex.org/W2769473656","doi":"https://doi.org/10.1145/3152434.3152444","mag":"2769473656"},"language":"en","primary_location":{"id":"doi:10.1145/3152434.3152444","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3152434.3152444","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3152444&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dl.acm.org/ft_gateway.cfm?id=3152444&type=pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029494825","display_name":"Dmitry Kogan","orcid":null},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Dmitry Kogan","raw_affiliation_strings":["Stanford University"],"affiliations":[{"raw_affiliation_string":"Stanford University","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068350999","display_name":"Henri Stern","orcid":null},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Henri Stern","raw_affiliation_strings":["Stanford University"],"affiliations":[{"raw_affiliation_string":"Stanford University","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087936711","display_name":"Ashley Tolbert","orcid":null},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ashley Tolbert","raw_affiliation_strings":["Stanford University"],"affiliations":[{"raw_affiliation_string":"Stanford University","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085123747","display_name":"David Mazi\u00e8res","orcid":"https://orcid.org/0000-0002-1253-6449"},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Mazi\u00e8res","raw_affiliation_strings":["Stanford University"],"affiliations":[{"raw_affiliation_string":"Stanford University","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020916270","display_name":"Keith Winstein","orcid":"https://orcid.org/0000-0003-2305-8048"},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Keith Winstein","raw_affiliation_strings":["Stanford University"],"affiliations":[{"raw_affiliation_string":"Stanford University","institution_ids":["https://openalex.org/I97018004"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5029494825"],"corresponding_institution_ids":["https://openalex.org/I97018004"],"apc_list":null,"apc_paid":null,"fwci":0.6578,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.74794379,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"15","last_page":"21"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/delegate","display_name":"Delegate","score":0.969550609588623},{"id":"https://openalex.org/keywords/delegation","display_name":"Delegation","score":0.820233941078186},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7128568887710571},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6815241575241089},{"id":"https://openalex.org/keywords/workaround","display_name":"Workaround","score":0.48839205503463745},{"id":"https://openalex.org/keywords/principal","display_name":"Principal (computer security)","score":0.4469956159591675},{"id":"https://openalex.org/keywords/notice","display_name":"Notice","score":0.43983685970306396},{"id":"https://openalex.org/keywords/handshake","display_name":"Handshake","score":0.4357861578464508},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4135340452194214},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.37487828731536865},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1493189036846161},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.07888039946556091},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.077816903591156},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.07582393288612366}],"concepts":[{"id":"https://openalex.org/C143273055","wikidata":"https://www.wikidata.org/wiki/Q2382794","display_name":"Delegate","level":2,"score":0.969550609588623},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.820233941078186},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7128568887710571},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6815241575241089},{"id":"https://openalex.org/C194541083","wikidata":"https://www.wikidata.org/wiki/Q457174","display_name":"Workaround","level":2,"score":0.48839205503463745},{"id":"https://openalex.org/C144559511","wikidata":"https://www.wikidata.org/wiki/Q2986279","display_name":"Principal (computer security)","level":2,"score":0.4469956159591675},{"id":"https://openalex.org/C2779913896","wikidata":"https://www.wikidata.org/wiki/Q7063001","display_name":"Notice","level":2,"score":0.43983685970306396},{"id":"https://openalex.org/C2778000800","wikidata":"https://www.wikidata.org/wiki/Q830043","display_name":"Handshake","level":3,"score":0.4357861578464508},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4135340452194214},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.37487828731536865},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1493189036846161},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.07888039946556091},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.077816903591156},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.07582393288612366},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3152434.3152444","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3152434.3152444","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3152444&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3152434.3152444","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3152434.3152444","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3152444&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6000000238418579}],"awards":[{"id":"https://openalex.org/G5384496013","display_name":null,"funder_award_id":"HR0011-15-2-0047","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"}],"funders":[{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2769473656.pdf","grobid_xml":"https://content.openalex.org/works/W2769473656.grobid-xml"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W77524159","https://openalex.org/W176141251","https://openalex.org/W296363392","https://openalex.org/W1513380209","https://openalex.org/W1709547319","https://openalex.org/W1987339920","https://openalex.org/W1989649788","https://openalex.org/W2006131471","https://openalex.org/W2052491126","https://openalex.org/W2077092541","https://openalex.org/W2100129018","https://openalex.org/W2138779530","https://openalex.org/W2141297628","https://openalex.org/W2145965671","https://openalex.org/W2151667574","https://openalex.org/W2188373044","https://openalex.org/W2273298738","https://openalex.org/W2293472844","https://openalex.org/W2294935184","https://openalex.org/W2295782180","https://openalex.org/W2496487567","https://openalex.org/W2502199022","https://openalex.org/W2597779881","https://openalex.org/W2981989192","https://openalex.org/W2996904609","https://openalex.org/W4210726200","https://openalex.org/W4238891088"],"related_works":["https://openalex.org/W115332106","https://openalex.org/W1591695585","https://openalex.org/W3183911098","https://openalex.org/W4238454263","https://openalex.org/W2559470891","https://openalex.org/W4245844877","https://openalex.org/W4248360724","https://openalex.org/W1975904519","https://openalex.org/W4386088672","https://openalex.org/W3125255130"],"abstract_inverted_index":{"Today's":[0],"secure":[1,95],"stream":[2],"protocols,":[3],"SSH":[4,40],"and":[5,12,59,73],"TLS,":[6],"were":[7],"designed":[8],"for":[9,18],"end-to-end":[10],"security":[11],"do":[13,101],"not":[14],"include":[15],"a":[16,23,76,82,89],"role":[17],"semi-trusted":[19],"third":[20,35],"parties.":[21],"As":[22],"result,":[24],"users":[25],"who":[26,99],"wish":[27],"to":[28,34,38,46,85,103],"delegate":[29,86],"some":[30],"of":[31,78,98],"their":[32],"authority":[33],"parties":[36],"(e.g.,":[37],"run":[39],"clients":[41],"in":[42],"the":[43,69],"cloud,":[44],"or":[45],"host":[47],"websites":[48],"on":[49,52],"CDNs)":[50],"rely":[51],"insecure":[53],"workarounds":[54],"such":[55],"as":[56],"ssh-agent":[57],"forwarding":[58],"Keyless":[60],"TLS.":[61],"We":[62],"argue":[63],"that":[64,106],"protocol":[65],"designers":[66],"should":[67,91],"consider":[68],"delegation":[70],"use-case":[71],"explicitly,":[72],"we":[74],"propose":[75],"definition":[77],"\"secure\"":[79],"delegation:":[80],"Before":[81],"principal":[83],"agrees":[84],"its":[87],"authority,":[88],"system":[90],"provide":[92],"it":[93],"with":[94],"advance":[96],"notice":[97],"will":[100],"what":[102],"whom":[104],"under":[105],"authority.":[107]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2020,"cited_by_count":3}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}
