{"id":"https://openalex.org/W2965754636","doi":"https://doi.org/10.23919/tma.2019.8784633","title":"A Residential Client-side Perspective on SSL Certificates","display_name":"A Residential Client-side Perspective on SSL Certificates","publication_year":2019,"publication_date":"2019-06-01","ids":{"openalex":"https://openalex.org/W2965754636","doi":"https://doi.org/10.23919/tma.2019.8784633","mag":"2965754636"},"language":"en","primary_location":{"id":"doi:10.23919/tma.2019.8784633","is_oa":false,"landing_page_url":"https://doi.org/10.23919/tma.2019.8784633","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 Network Traffic Measurement and Analysis Conference (TMA)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111590788","display_name":"Edward Oakes","orcid":null},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Edward Oakes","raw_affiliation_strings":["University of California, Berkeley"],"affiliations":[{"raw_affiliation_string":"University of California, Berkeley","institution_ids":["https://openalex.org/I95457486"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106277659","display_name":"Jeffery Kline","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jeffery Kline","raw_affiliation_strings":["Hitwise"],"affiliations":[{"raw_affiliation_string":"Hitwise","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000642459","display_name":"Aaron Cahn","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Aaron Cahn","raw_affiliation_strings":["Comscor"],"affiliations":[{"raw_affiliation_string":"Comscor","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069504528","display_name":"Keith Funkhouser","orcid":null},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Keith Funkhouser","raw_affiliation_strings":["Comscore (now at Google)"],"affiliations":[{"raw_affiliation_string":"Comscore (now at Google)","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043427561","display_name":"Paul Barford","orcid":"https://orcid.org/0000-0001-7874-1819"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Paul Barford","raw_affiliation_strings":["University of Wisconsin, Madison"],"affiliations":[{"raw_affiliation_string":"University of Wisconsin, Madison","institution_ids":["https://openalex.org/I135310074"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5111590788"],"corresponding_institution_ids":["https://openalex.org/I95457486"],"apc_list":null,"apc_paid":null,"fwci":0.42,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.70752399,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"185","last_page":"192"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/certificate","display_name":"Certificate","score":0.7619514465332031},{"id":"https://openalex.org/keywords/certificate-authority","display_name":"Certificate authority","score":0.7010339498519897},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6850023865699768},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6080166697502136},{"id":"https://openalex.org/keywords/public-key-certificate","display_name":"Public key certificate","score":0.6028507351875305},{"id":"https://openalex.org/keywords/root-certificate","display_name":"Root certificate","score":0.573885977268219},{"id":"https://openalex.org/keywords/public-key-infrastructure","display_name":"Public key infrastructure","score":0.5489485859870911},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5218197703361511},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.460694283246994},{"id":"https://openalex.org/keywords/hierarchy","display_name":"Hierarchy","score":0.4442085027694702},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.4432920813560486},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.4326096773147583},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.41673290729522705},{"id":"https://openalex.org/keywords/server-side","display_name":"Server-side","score":0.4109554886817932},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.38008642196655273},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.09697476029396057},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.09076395630836487}],"concepts":[{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.7619514465332031},{"id":"https://openalex.org/C93636275","wikidata":"https://www.wikidata.org/wiki/Q196776","display_name":"Certificate authority","level":4,"score":0.7010339498519897},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6850023865699768},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6080166697502136},{"id":"https://openalex.org/C167529545","wikidata":"https://www.wikidata.org/wiki/Q274758","display_name":"Public key certificate","level":4,"score":0.6028507351875305},{"id":"https://openalex.org/C62057728","wikidata":"https://www.wikidata.org/wiki/Q7366568","display_name":"Root certificate","level":5,"score":0.573885977268219},{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.5489485859870911},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5218197703361511},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.460694283246994},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.4442085027694702},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.4432920813560486},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.4326096773147583},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.41673290729522705},{"id":"https://openalex.org/C14414571","wikidata":"https://www.wikidata.org/wiki/Q519081","display_name":"Server-side","level":2,"score":0.4109554886817932},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.38008642196655273},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.09697476029396057},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.09076395630836487},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C34447519","wikidata":"https://www.wikidata.org/wiki/Q179522","display_name":"Market economy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/tma.2019.8784633","is_oa":false,"landing_page_url":"https://doi.org/10.23919/tma.2019.8784633","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 Network Traffic Measurement and Analysis Conference (TMA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6200000047683716}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1708992266","https://openalex.org/W1910624757","https://openalex.org/W2001637908","https://openalex.org/W2056494114","https://openalex.org/W2104899073","https://openalex.org/W2129830111","https://openalex.org/W2130867912","https://openalex.org/W2134101189","https://openalex.org/W2166957790","https://openalex.org/W2233063544","https://openalex.org/W2487661922","https://openalex.org/W2550748725","https://openalex.org/W2552873532","https://openalex.org/W2588121565","https://openalex.org/W2604745103","https://openalex.org/W2612544399","https://openalex.org/W2619725017","https://openalex.org/W2625329361","https://openalex.org/W2755252385","https://openalex.org/W2792818501","https://openalex.org/W2895807258","https://openalex.org/W3105355360","https://openalex.org/W4250318009","https://openalex.org/W6679724985"],"related_works":["https://openalex.org/W2376373997","https://openalex.org/W2188945435","https://openalex.org/W2277273755","https://openalex.org/W2369694906","https://openalex.org/W2506604349","https://openalex.org/W2994213367","https://openalex.org/W2302913080","https://openalex.org/W4379883128","https://openalex.org/W4313288832","https://openalex.org/W4240158903"],"abstract_inverted_index":{"SSL":[0,33,51],"certificates":[1,172],"are":[2],"a":[3,26,56,67,89],"core":[4],"component":[5],"of":[6,25,29,32,49,60,69,83,92,108,117,124,137,170,181,195],"the":[7,16,23,30,80,109,115,125,168,193,196],"public":[8],"key":[9],"infrastructure":[10],"that":[11,135],"underpins":[12],"encrypted":[13],"communication":[14],"in":[15,165],"Internet.":[17],"In":[18],"this":[19],"paper,":[20],"we":[21,145,158],"report":[22,113],"results":[24,178],"longitudinal":[27],"study":[28],"characteristics":[31,116,187],"certificate":[34,52,100,132,143,186],"chains":[35,53,101],"presented":[36],"to":[37],"clients":[38],"during":[39],"secure":[40,174],"web":[41],"(HTTPS)":[42],"connection":[43],"setup.":[44],"Our":[45,177],"data":[46,73],"set":[47],"consists":[48],"23B":[50],"collected":[54],"from":[55],"global":[57],"panel":[58],"consisting":[59],"over":[61,66,97],"2M":[62],"residential":[63,197],"client":[64,93],"machines":[65],"period":[68],"6":[70],"months.":[71],"The":[72],"informing":[74],"our":[75,166],"analyses":[76],"provide":[77],"perspective":[78],"on":[79,114,185],"entire":[81],"chain":[82,151],"trust,":[84],"including":[85],"root":[86,142,171],"certificates,":[87,119],"across":[88],"wide":[90],"distribution":[91],"machines.":[94],"We":[95,112,128],"identify":[96],"35M":[98],"unique":[99],"with":[102],"diverse":[103],"relationships":[104],"at":[105],"all":[106],"levels":[107],"PKI":[110],"hierarchy.":[111],"valid":[118,155],"which":[120],"make":[121],"up":[122],"99.7%":[123],"total":[126],"corpus.":[127],"also":[129],"examine":[130,159],"invalid":[131],"chains,":[133],"finding":[134],"93%":[136],"them":[138],"contain":[139],"an":[140],"untrusted":[141],"and":[144,173],"find":[146],"they":[147],"have":[148],"shorter":[149],"average":[150],"length":[152],"than":[153],"their":[154],"counterparts.":[156],"Finally,":[157],"two":[160],"unintended":[161],"but":[162,188],"prevalent":[163],"behaviors":[164],"data:":[167],"deprecation":[169],"traffic":[175],"interception.":[176],"support":[179],"aspects":[180],"prior,":[182],"scan-based":[183],"studies":[184],"contradict":[189],"other":[190],"findings,":[191],"highlighting":[192],"importance":[194],"client-side":[198],"perspective.":[199]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
