<?xml version="1.0" encoding="utf-8"?>
<export-example>
  <doc>
    <id>26015</id>
    <completedYear/>
    <publishedYear>2020</publishedYear>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst/>
    <pageLast/>
    <pageNumber>12</pageNumber>
    <edition/>
    <issue>3</issue>
    <volume>50</volume>
    <type>articler</type>
    <publisherName/>
    <publisherPlace/>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>0</belongsToBibliography>
    <completedDate>2020-09-17</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">Tracking the deployment of TLS 1.3 on the Web: A story of experimentation and centralization</title>
    <parentTitle language="eng">ACM SIGCOMM Computer Communication Review</parentTitle>
    <identifier type="doi">10.1145/3411740.3411742</identifier>
    <identifier type="issn">0146-4833</identifier>
    <enrichment key="BTU">an der BTU erstellt / created at BTU</enrichment>
    <enrichment key="opus.doi.autoCreate">false</enrichment>
    <enrichment key="opus.urn.autoCreate">false</enrichment>
    <enrichment key="Fprofil">4 Künstliche Intelligenz und Sensorik / Artificial Intelligence and Sensor Technology</enrichment>
    <author>
      <firstName>Ralph</firstName>
      <lastName>Holz</lastName>
    </author>
    <submitter>
      <firstName>Katrin</firstName>
      <lastName>Willhöft</lastName>
    </submitter>
    <author>
      <firstName>Jens</firstName>
      <lastName>Hiller</lastName>
    </author>
    <author>
      <firstName>Johanna</firstName>
      <lastName>Amann</lastName>
    </author>
    <author>
      <firstName>Abbas</firstName>
      <lastName>Razaghpanah</lastName>
    </author>
    <author>
      <firstName>Thomas</firstName>
      <lastName>Jost</lastName>
    </author>
    <author>
      <firstName>Narseo</firstName>
      <lastName>Vallina-Rodriguez</lastName>
    </author>
    <author>
      <firstName>Oliver</firstName>
      <lastName>Hohlfeld</lastName>
    </author>
    <collection role="institutes" number="1203">FG Rechnernetze und Kommunikationssysteme</collection>
  </doc>
  <doc>
    <id>26288</id>
    <completedYear/>
    <publishedYear>2020</publishedYear>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst>1289</pageFirst>
    <pageLast>1306</pageLast>
    <pageNumber/>
    <edition/>
    <issue/>
    <volume/>
    <type>conferenceobject_ref</type>
    <publisherName/>
    <publisherPlace/>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>0</belongsToBibliography>
    <completedDate>2020-11-11</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">The Boon and Bane of Cross-Signing: Shedding Light on a Common Practice in Public Key Infrastructures</title>
    <abstract language="eng">Public Key Infrastructures (PKIs) with their trusted Certificate Authorities (CAs) provide the trust backbone for the Internet: CAs sign certificates which prove the identity of servers, applications, or users. To be trusted by operating systems and browsers, a CA has to undergo lengthy and costly validation processes. Alternatively, trusted CAs can cross-sign other CAs to extend their trust to them. In this paper, we systematically analyze the present and past state of cross-signing in the Web PKI. Our dataset (derived from passive TLS monitors and public CT logs) encompasses more than 7 years and 225 million certificates with 9.3 billion trust paths. We show benefits and risks of cross-signing. We discuss the difficulty of revoking trusted CA certificates where, worrisome, cross-signing can result in valid trust paths to remain after revocation; a problem for non-browser software that often blindly trusts all CA certificates and ignores revocations. However, cross-signing also enables fast bootstrapping of new CAs, e.g., Let's Encrypt, and achieves a non-disruptive user experience by providing backward compatibility. In this paper, we propose new rules and guidance for cross-signing to preserve its positive potential while mitigating its risks.</abstract>
    <parentTitle language="eng">CCS '20: Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, October 2020</parentTitle>
    <identifier type="doi">10.1145/3372297.3423345</identifier>
    <enrichment key="BTU">an der BTU erstellt / created at BTU</enrichment>
    <enrichment key="opus.doi.autoCreate">false</enrichment>
    <enrichment key="opus.urn.autoCreate">false</enrichment>
    <enrichment key="Fprofil">4 Künstliche Intelligenz und Sensorik / Artificial Intelligence and Sensor Technology</enrichment>
    <author>
      <firstName>Jens</firstName>
      <lastName>Hiller</lastName>
    </author>
    <submitter>
      <firstName>Katrin</firstName>
      <lastName>Willhöft</lastName>
    </submitter>
    <author>
      <firstName>Johanna</firstName>
      <lastName>Amann</lastName>
    </author>
    <author>
      <firstName>Oliver</firstName>
      <lastName>Hohlfeld</lastName>
    </author>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>Security and privacy</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>Network security</value>
    </subject>
    <collection role="institutes" number="1203">FG Rechnernetze und Kommunikationssysteme</collection>
  </doc>
  <doc>
    <id>26875</id>
    <completedYear/>
    <publishedYear>2019</publishedYear>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst/>
    <pageLast/>
    <pageNumber>9</pageNumber>
    <edition/>
    <issue/>
    <volume/>
    <type>conferenceobject_ref</type>
    <publisherName>IEEE</publisherName>
    <publisherPlace/>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>0</belongsToBibliography>
    <completedDate>2021-01-25</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">The Case for Session Sharing: Relieving Clients from TLS Handshake Overheads</title>
    <abstract language="eng">In recent years, the amount of traffic protected&#13;
with Transport Layer Security (TLS) has significantly increased&#13;
and new protocols such as HTTP/2 and QUIC further foster&#13;
this emerging trend. However, protecting traffic with TLS has&#13;
significant impacts on network entities. While the restrictions for&#13;
middleboxes have been extensively studied, addressing the impact&#13;
of TLS on clients and servers has been mostly neglected so far.&#13;
Especially mobile clients in emerging 5G and IoT deployments&#13;
suffer from significantly increased latency, traffic, and energy&#13;
overheads when protecting traffic with TLS. In this paper,&#13;
we address this emerging topic by thoroughly analyzing the&#13;
impact of TLS on clients and servers and derive opportunities&#13;
for significantly decreasing latency of TLS communication and&#13;
downsizing TLS management traffic, thereby also reducing TLSinduced&#13;
server load. We propose a protocol compatible redesign&#13;
of TLS session management to use these opportunities and&#13;
showcase their potential based on mobile device traffic and mobile&#13;
web-browsing traces. These show promising potentials for latency&#13;
improvements by up to 25.8% and energy savings of up to 26.3%.</abstract>
    <parentTitle language="eng">2019 IEEE 44th LCN Symposium on Emerging Topics in Networking (LCN Symposium), 14-17 Oct. 2019, Osnabrück, Germany</parentTitle>
    <identifier type="isbn">978-1-7281-2561-9</identifier>
    <identifier type="url">https://ieeexplore.ieee.org/document/9000667</identifier>
    <identifier type="doi">10.1109/LCNSymposium47956.2019.9000667</identifier>
    <identifier type="isbn">978-1-7281-2562-6</identifier>
    <enrichment key="BTU">an der BTU erstellt / created at BTU</enrichment>
    <enrichment key="opus.source">publish</enrichment>
    <enrichment key="opus.doi.autoCreate">false</enrichment>
    <enrichment key="opus.urn.autoCreate">false</enrichment>
    <author>
      <firstName>Jens</firstName>
      <lastName>Hiller</lastName>
    </author>
    <submitter>
      <firstName>Katrin</firstName>
      <lastName>Willhöft</lastName>
    </submitter>
    <author>
      <firstName>Martin</firstName>
      <lastName>Henze</lastName>
    </author>
    <author>
      <firstName>Torsten</firstName>
      <lastName>Zimmermann</lastName>
    </author>
    <author>
      <firstName>Oliver</firstName>
      <lastName>Hohlfeld</lastName>
    </author>
    <author>
      <firstName>Klaus</firstName>
      <lastName>Wehrle</lastName>
    </author>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>TLS Performance, Efficient Secure Communication, TLS Session Resumption, Network Security, Security and Privacy, Mobile Networking, 5G and IoT</value>
    </subject>
    <collection role="institutes" number="1203">FG Rechnernetze und Kommunikationssysteme</collection>
  </doc>
</export-example>
