16 citations · 33 across the 6 of their papers we have counts for
3 papers · 1 filter
A Call to Reconsider Certification Authority Authorization (CAA)
Pouyan Fotouhi Tehrani, Raphael Hiesgen, Thomas C. Schmidt +1
Certification Authority Authentication (CAA) is a safeguard against illegitimate certificate issuance. We show how shortcomings in CAA concepts and operational aspects undermine it…
Do CAA, CT, and DANE Interlink in Certificate Deployments? A Web PKI Measurement Study
Pouyan Fotouhi Tehrani, Raphael Hiesgen, Teresa Lübeck +2
Integrity and trust on the web build on X.509 certificates. Misuse or misissuance of these certificates threaten the Web PKI security model, which led to the development of several…
How to Measure TLS, X.509 Certificates, and Web PKI: A Tutorial and Brief Survey
Pouyan Fotouhi Tehrani, Eric Osterweil, Thomas C. Schmidt +1
Transport Layer Security (TLS) is the base for many Internet applications and services to achieve end-to-end security. In this paper, we provide guidance on how to measure TLS depl…