16 citations · 27 across the 5 of their papers we have counts for
6 papers
A Call to Reconsider Certification Authority Authorization (CAA)
Pouyan Fotouhi Tehrani, Raphael Hiesgen, Thomas C. Schmidt +1
Certification Authority Authentication (CAA) is a safeguard against illegitimate certificate issuance. We show how shortcomings in CAA concepts and operational aspects undermine it…
Do CAA, CT, and DANE Interlink in Certificate Deployments? A Web PKI Measurement Study
Pouyan Fotouhi Tehrani, Raphael Hiesgen, Teresa Lübeck +2
Integrity and trust on the web build on X.509 certificates. Misuse or misissuance of these certificates threaten the Web PKI security model, which led to the development of several…
How to Measure TLS, X.509 Certificates, and Web PKI: A Tutorial and Brief Survey
Pouyan Fotouhi Tehrani, Eric Osterweil, Thomas C. Schmidt +1
Transport Layer Security (TLS) is the base for many Internet applications and services to achieve end-to-end security. In this paper, we provide guidance on how to measure TLS depl…
On the Interplay between TLS Certificates and QUIC Performance
Marcin Nawrocki, Pouyan Fotouhi Tehrani, Raphael Hiesgen +3
In this paper, we revisit the performance of the QUIC connection setup and relate the design choices for fast and secure connections to common Web deployments. We analyze over 1M W…
From the Beginning: Key Transitions in the First 15 Years of DNSSEC
Eric Osterweil, Pouyan Fotouhi Tehrani, Thomas C. Schmidt +1
When the global rollout of the DNS Security Extensions (DNSSEC) began in 2005, a first-of-its-kind trial started: The complexity of a core Internet protocol was magnified in favor…
Security of Alerting Authorities in the WWW: Measuring Namespaces, DNSSEC, and Web PKI
Pouyan Fotouhi Tehrani, Eric Osterweil, Jochen H. Schiller +2
During disasters, crisis, and emergencies the public relies on online services provided by official authorities to receive timely alerts, trustworthy information, and access to rel…