An End-to-End Measurement of Certificate Revocation in the Web's PKI
Yabing Liu, Will Tome, Liang Zhang, David Choffnes, Dave Levin, Bruce MacDowell Maggs, Alan E. Mislove, Aaron Schulman, Christo Wilson
Internet Measurement Conference · 2015 · 인용 142
Critical to the security of any public key infrastructure (PKI) is the ability to revoke previously issued certificates. While the overall SSL ecosystem is well-studied, the frequency with which certificates are revoked and the circumstances under which clients (e.g., browsers) check whether certificates are revoked are still not well-understood.