Certified Lies: Detecting and Defeating Government Interception Attacks against SSL (Short Paper)

Authors :: Christopher Soghoian
Sid Stamm
Source :: Financial Cryptography and Data Security ISBN: 9783642275753, Financial Cryptography
Publication Year :: 2012
Publisher :: Springer Berlin Heidelberg, 2012.
Abstract: This paper introduces the compelled certificate creation attack, in which government agencies may compel a certificate authority to issue false SSL certificates that can be used by intelligence agencies to covertly intercept and hijack individuals' secure Web-based communications.

Subjects :: Government
Software_OPERATINGSYSTEMS
Transport Layer Security
ComputingMilieux_THECOMPUTINGPROFESSION
Computer science
business.industry
ComputerSystemsOrganization_COMPUTER-COMMUNICATIONNETWORKS
Internet privacy
Short paper
Certification
Cryptographic protocol
Computer security
computer.software_genre
Certificate
ComputingMilieux_MANAGEMENTOFCOMPUTINGANDINFORMATIONSYSTEMS
Certificate authority
Interception
business
computer

ISBN :: 978-3-642-27575-3
ISBNs :: 9783642275753
Database :: OpenAIRE
Journal :: Financial Cryptography and Data Security ISBN: 9783642275753, Financial Cryptography
Accession number :: edsair.doi...........619091bd3cec88fa922cfd35514262fe
Full Text :: https://doi.org/10.1007/978-3-642-27576-0_20

Full Text Access

Tools