{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T18:38:51Z","timestamp":1780079931929,"version":"3.54.0"},"publisher-location":"Cham","reference-count":41,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030578770","type":"print"},{"value":"9783030578787","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-57878-7_19","type":"book-chapter","created":{"date-parts":[[2020,8,28]],"date-time":"2020-08-28T14:03:04Z","timestamp":1598623384000},"page":"387-407","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["When TLS Meets Proxy on Mobile"],"prefix":"10.1007","author":[{"given":"Joyanta","family":"Debnath","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sze Yiu","family":"Chau","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Omar","family":"Chowdhury","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2020,8,29]]},"reference":[{"key":"19_CR1","unstructured":"Baseline requirements for the issuance and management of publicly-trusted certificates (2019). https:\/\/cabforum.org\/wp-content\/uploads\/CA-Browser-Forum-BR-1.6.6.pdf"},{"key":"19_CR2","doi-asserted-by":"crossref","unstructured":"Al Fardan, N.J., Paterson, K.G.: Lucky thirteen: breaking the TLS and DTLS record protocols. In: IEEE S&P (2013)","DOI":"10.1109\/SP.2013.42"},{"key":"19_CR3","unstructured":"AlFardan, N., Bernstein, D.J., Paterson, K.G., Poettering, B., Schuldt, J.C.: On the security of RC4 in TLS. In: USENIX Security (2013)"},{"key":"19_CR4","doi-asserted-by":"crossref","unstructured":"Barker, E., Mouha, N.: Recommendation for triple data encryption algorithm (TDEA) block cipher. NIST special publication 800\u201367 Rev. 2 (2017)","DOI":"10.6028\/NIST.SP.800-67r2"},{"key":"19_CR5","doi-asserted-by":"crossref","unstructured":"Barker, E., Roginsk, A.: Transitioning the use of cryptographic algorithms and key lengths. NIST special publication 800\u2013131A Rev. 2 (2019)","DOI":"10.6028\/NIST.SP.800-131Ar2"},{"key":"19_CR6","doi-asserted-by":"crossref","unstructured":"Bellare, M.: New proofs for NMAC and HMAC: security without collision-resistance. In: Annual International Cryptology Conference (2006)","DOI":"10.1007\/11818175_36"},{"key":"19_CR7","doi-asserted-by":"crossref","unstructured":"Bhargavan, K., Leurent, G.: On the practical (in-) security of 64-bit block ciphers: collision attacks on http over TLS and openVPN. In: ACM CCS (2016)","DOI":"10.1145\/2976749.2978423"},{"key":"19_CR8","doi-asserted-by":"crossref","unstructured":"Bhargavan, K., Leurent, G.: Transcript collision attacks: breaking authentication in TLS, IKE, and SSH. In: NDSS (2016)","DOI":"10.14722\/ndss.2016.23418"},{"key":"19_CR9","unstructured":"Bright, P.: Apple, google, microsoft, and mozilla come together to end TLS 1.0 (2018). https:\/\/arstechnica.com\/gadgets\/2018\/10\/browser-vendors-unite-to-end-support-for-20-year-old-tls-1-0\/"},{"key":"19_CR10","doi-asserted-by":"crossref","unstructured":"Calzavara, S., Focardi, R., Nemec, M., Rabitti, A., Squarcina, M.: Postcards from the post-http world: amplification of https vulnerabilities in the web ecosystem. In: IEEE S&P (2019)","DOI":"10.1109\/SP.2019.00053"},{"key":"19_CR11","unstructured":"de Carnavalet, X.D.C., Mannan, M.: Killed by proxy: analyzing client-end TLS interception software. In: NDSS (2016)"},{"key":"19_CR12","doi-asserted-by":"crossref","unstructured":"Debnath, J.: When TLS meets proxy on mobile (2020). https:\/\/sites.google.com\/view\/joyantadebnath\/when-tls-meets-proxy-on-mobile","DOI":"10.1007\/978-3-030-57878-7_19"},{"key":"19_CR13","unstructured":"Duong, T., Rizzo, J.: Here come the $$\\oplus $$ ninjas. Technical report (2011)"},{"key":"19_CR14","doi-asserted-by":"crossref","unstructured":"Durumeric, Z., et al.: The security impact of https interception. In: NDSS (2017)","DOI":"10.14722\/ndss.2017.23456"},{"key":"19_CR15","doi-asserted-by":"crossref","unstructured":"Ensafi, R., Fifield, D., Winter, P., Feamster, N., Weaver, N., Paxson, V.: Examining how the great firewall discovers hidden circumvention servers. In: ACM IMC (2015)","DOI":"10.1145\/2815675.2815690"},{"key":"19_CR16","unstructured":"Garman, C., Paterson, K.G., Van der Merwe, T.: Attacks only get better: password recovery attacks against RC4 in TLS. In: USENIX Security (2015)"},{"key":"19_CR17","doi-asserted-by":"crossref","unstructured":"Huang, L.S., Rice, A., Ellingsen, E., Jackson, C.: Analyzing forged SSL certificates in the wild. In: IEEE S&P (2014)","DOI":"10.1109\/SP.2014.13"},{"key":"19_CR18","doi-asserted-by":"crossref","unstructured":"Irazoqui, G., Inci, M.S., Eisenbarth, T., Sunar, B.: Lucky 13 strikes back. In: ACM Symposium on Information, Computer and Communications Security (2015)","DOI":"10.1145\/2714576.2714625"},{"key":"19_CR19","unstructured":"Jarmoc, J., Unit, D.: SSL\/TLS interception proxies and transitive trust. Black Hat Europe (2012)"},{"key":"19_CR20","doi-asserted-by":"crossref","unstructured":"Lenstra, A., De Weger, B.: On the possibility of constructing meaningful hash collisions for public keys. In: Australasian Conference on Information Security and Privacy (2005)","DOI":"10.1007\/11506157_23"},{"key":"19_CR21","doi-asserted-by":"crossref","unstructured":"Luo, M., Laperdrix, P., Honarmand, N., Nikiforakis, N.: Time does not heal all wounds: a longitudinal analysis of security-mechanism support in mobile browsers. In: NDSS (2019)","DOI":"10.14722\/ndss.2019.23149"},{"key":"19_CR22","doi-asserted-by":"crossref","unstructured":"McDonald, A., et al.: 403 forbidden: a global view of CDN geoblocking. In: ACM IMC (2018)","DOI":"10.1145\/3278532.3278552"},{"key":"19_CR23","unstructured":"Moriarty, K., Farrell, S.: Deprecating TLSV1.0 and TLSV1.1 (2019). https:\/\/tools.ietf.org\/html\/draft-ietf-tls-oldversions-deprecate-05"},{"key":"19_CR24","doi-asserted-by":"crossref","unstructured":"Niaki, A.A., et al.: IClab: a global, longitudinal internet censorship measurement platform. In: IEEE S&P (2019)","DOI":"10.1109\/SP40000.2020.00014"},{"key":"19_CR25","unstructured":"Payne, B.: PKI at scale using short-lived certificates. In: USENIX Enigma (2016)"},{"key":"19_CR26","unstructured":"PCI Security Standards Council: Migrating from SSL and early TLS. Technical report (2015)"},{"issue":"3","key":"19_CR27","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3092368","volume":"20","author":"B Reaves","year":"2017","unstructured":"Reaves, B., et al.: Mo (bile) money, mo (bile) problems: analysis of branchless banking applications. ACM Trans. Priv. Secur. 20(3), 1\u201331 (2017)","journal-title":"ACM Trans. Priv. Secur."},{"key":"19_CR28","doi-asserted-by":"crossref","unstructured":"Ronen, E., Paterson, K.G., Shamir, A.: Pseudo constant time implementations of TLS are only pseudo secure. In: ACM CCS (2018)","DOI":"10.1145\/3243734.3243775"},{"key":"19_CR29","unstructured":"Sotirov, A., et al.: MD5 considered harmful today, creating a rogue CA certificate. In: Annual Chaos Communication Congress (2008)"},{"key":"19_CR30","doi-asserted-by":"crossref","unstructured":"Stevens, M., Bursztein, E., Karpman, P., Albertini, A., Markov, Y.: The first collision for full sha-1. In: Annual International Cryptology Conference (2017)","DOI":"10.1007\/978-3-319-63688-7_19"},{"key":"19_CR31","doi-asserted-by":"crossref","unstructured":"Stevens, M., Karpman, P., Peyrin, T.: Freestart collision for full sha-1. In: Annual International Conference on the Theory and Applications of Cryptographic Techniques (2016)","DOI":"10.1007\/978-3-662-49890-3_18"},{"key":"19_CR32","doi-asserted-by":"crossref","unstructured":"Stevens, M., Lenstra, A., Weger, B.: Chosen-prefix collisions for md5 and colliding x.509 certificates for different identities. In: Annual International Conference on Advances in Cryptology (2007)","DOI":"10.1007\/978-3-540-72540-4_1"},{"key":"19_CR33","unstructured":"Taylor, M.: Tls 1.0 and 1.1 removal update (2019). https:\/\/hacks.mozilla.org\/2019\/05\/tls-1-0-and-1-1-removal-update\/"},{"key":"19_CR34","unstructured":"Topalovic, E., Saeta, B., Huang, L.S., Jackson, C., Boneh, D.: Towards short-lived certificates. Web 2.0 Secur. Priv. (2012)"},{"key":"19_CR35","unstructured":"VanderSloot, B., McDonald, A., Scott, W., Halderman, J.A., Ensafi, R.: Quack: scalable remote measurement of application-layer censorship. In: USENIX Security (2018)"},{"key":"19_CR36","unstructured":"Vanhoef, M., Piessens, F.: All your biases belong to us: Breaking RC4 in wpa-tkip and TLS. In: USENIX Security (2015)"},{"key":"19_CR37","doi-asserted-by":"crossref","unstructured":"Waked, L., Mannan, M., Youssef, A.: To intercept or not to intercept: analyzing TLS interception in network appliances. In: ACM AsiaCCS (2018)","DOI":"10.1145\/3196494.3196528"},{"key":"19_CR38","doi-asserted-by":"crossref","unstructured":"Wang, Q., Gong, X., Nguyen, G.T., Houmansadr, A., Borisov, N.: Censorspoofer: asymmetric communication using IP spoofing for censorship-resistant web browsing. In: ACM CCS (2012)","DOI":"10.1145\/2382196.2382212"},{"key":"19_CR39","unstructured":"Wang, X., Feng, D., Lai, X., Yu, H.: Collisions for hash functions MD4, MD5, HAVAL-128 and RIPEMD. IACR Cryptology ePrint Archive (2004)"},{"key":"19_CR40","doi-asserted-by":"crossref","unstructured":"Wang, X., Yin, Y.L., Yu, H.: Finding collisions in the full SHA-1. In: Annual International Cryptology Conference (2005)","DOI":"10.1007\/11535218_2"},{"key":"19_CR41","unstructured":"Wilson, K.: Phasing out certificates with 1024-bit RSA keys (2014). https:\/\/blog.mozilla.org\/security\/2014\/09\/08\/phasing-out-certificates-with-1024-bit-rsa-keys\/"}],"container-title":["Lecture Notes in Computer Science","Applied Cryptography and Network Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-57878-7_19","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,24]],"date-time":"2021-04-24T04:44:33Z","timestamp":1619239473000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-57878-7_19"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030578770","9783030578787"],"references-count":41,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-57878-7_19","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"29 August 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ACNS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Applied Cryptography and Network Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Rome","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Italy","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 October 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 October 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"acns2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/sites.google.com\/di.uniroma1.it\/ACNS2020","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"214","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"46","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"21% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.7","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"10","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Due to COVID-19 pandemy the confernce was helt virtually.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}