… Therefore, in this paper, a trustworthy domain name resolution method using TLS certificates
… the DoT-based name resolution is extended to authoritative DNS servers and the certificate …

… ’s TLS PKI, we design and propose PoliCert, a log-based proposal that allows domains to
define policies governing the usage of their TLS certificates. … CAs and logs to resolve the issue. …

… NSS’ chain resolution algorithm is lenient and can accept chains rejected by OpenSSL. This
… a certificate validates for a given hostname. Checking the hostname against the certificate is …

… As name resolution and path establishment are separate … We begin with an analysis of what
a name resolution service is … the TLS certificate against a pinned certificate for that server. …

… false certificate-issuance and ensures that a set of CAs validates every certificate before any
client will accept it. A certificate collectively approved by a set of CAs assures users that the …

… of TLS certificates of current Booters. Further, we analyze the characteristics of the used of
TLS certificates (eg, certificate … , issuer and the validity of the certificate). To summarize, our con…

… These names resolve to a variety of IP addresses in Apple’s … TLS CCA connections with
57,477 unique client certificates, of … certificates, we find 220 distinct issuer distinguished names (…

… in RAINS proceeds along similar lines as in DNS, except network links use TLS (with
pinned certificates used to bootstrap), DNSSEC-style record signing is mandatory. The global …

… to measure TLS deployments, including X.509 certificates and Web … By surveying prior TLS
meaurement studies we find that … out of the top 1000 names in this list do not resolve to an IP …

… that significantly speeds up the full TLS handshake. We discuss four certificate prefetching
strategies: (1) prefetch from DNS as part of a DNS domain-name resolution, (2) prefetch using …