Title

On the Validation of Web X.509 Certificates by TLS interception products

Document Type

Article

Source of Publication

IEEE Transactions on Dependable and Secure Computing

Publication Date

1-1-2020

Abstract

The Transport Layer Security (TLS) protocol aims to provide confidentiality and integrity of data. It is based on X.509 Certificates. Our previous research showed that popular Web Browsers exhibit non-standardized behaviour with respect to the certificate validation process [1]. This paper extends that work by examining their handling of OCSP Stapling. We also examine several popular HTTPS interception products, including proxies and anti-virus tools, regarding their certificate validation processes. We analyse and compare their behaviour to that described in the relative standards. Finally, we propose a system that allows the automation of certificate validation tests.

ISSN

1545-5971

Publisher

Institute of Electrical and Electronics Engineers (IEEE)

Volume

PP

Disciplines

Computer Sciences

Indexed in Scopus

no

Open Access

no

Open Access Type

Bronze: This publication is openly available on the publisher’s website but without an open license

Share

COinS