{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T15:21:10Z","timestamp":1778858470436,"version":"3.51.4"},"reference-count":35,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2025,6,1]],"date-time":"2025-06-01T00:00:00Z","timestamp":1748736000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,6,1]],"date-time":"2025-06-01T00:00:00Z","timestamp":1748736000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,6,1]],"date-time":"2025-06-01T00:00:00Z","timestamp":1748736000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"COMPACT (Compressed features and representations for network traffic analysis in centralized and edge Internet architectures","award":["2022M2Z728"],"award-info":[{"award-number":["2022M2Z728"]}]},{"name":"European Union - NextGenerationEU","award":["PRIN 2022"],"award-info":[{"award-number":["PRIN 2022"]}]},{"name":"Ministero dell'Universit? e della Ricerca)","award":["D.D. 104 - 02\/02\/2022"],"award-info":[{"award-number":["D.D. 104 - 02\/02\/2022"]}]},{"name":"iNEST"},{"name":"European Union - NextGenerationEU (Piano Nazionale di Ripresa e Resilienza (PNRR) - Missione 4 Componente 2, Investimento 1.5","award":["D.D. 1058 23\/06\/2022"],"award-info":[{"award-number":["D.D. 1058 23\/06\/2022"]}]},{"name":"European Union - NextGenerationEU (Piano Nazionale di Ripresa e Resilienza (PNRR) - Missione 4 Componente 2, Investimento 1.5","award":["ECS 00000043"],"award-info":[{"award-number":["ECS 00000043"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE J. Sel. Areas Commun."],"published-print":{"date-parts":[[2025,6]]},"DOI":"10.1109\/jsac.2025.3560006","type":"journal-article","created":{"date-parts":[[2025,4,11]],"date-time":"2025-04-11T18:01:25Z","timestamp":1744394485000},"page":"2200-2214","source":"Crossref","is-referenced-by-count":2,"title":["A Zero Trust Data-Driven Perspective on PKI Root Stores"],"prefix":"10.1109","volume":"43","author":[{"given":"Mauro","family":"Farina","sequence":"first","affiliation":[{"name":"Department of Engineering and Architecture, University of Trieste, Trieste, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Damiano","family":"Ravalico","sequence":"additional","affiliation":[{"name":"Department of Engineering and Architecture, University of Trieste, Trieste, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martino","family":"Trevisan","sequence":"additional","affiliation":[{"name":"Department of Engineering and Architecture, University of Trieste, Trieste, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4132-416X","authenticated-orcid":false,"given":"Alberto","family":"Bartoli","sequence":"additional","affiliation":[{"name":"Department of Engineering and Architecture, University of Trieste, Trieste, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Executive Order on Improving the Nation\u2019s Cybersecurity","year":"2021"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3573129"},{"key":"ref3","article-title":"Zero trust architecture","author":"Stafford","year":"2020"},{"key":"ref4","volume-title":"Zero Trust Architecture Design Principles","year":"2023"},{"key":"ref5","volume-title":"Evolving Zero Trust","year":"2021"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3487552.3487813"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SocialCom.2013.90"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504755"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2015.93"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-45472-5_20"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3035265"},{"key":"ref12","volume-title":"EU Digital Identity Reform: The Good, Bad & Ugly in the eIDAS Regulation","year":"2023"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3664476.3670900"},{"key":"ref14","volume-title":"How PKI Can Strengthen Your Zero Trust Security Posture","author":"Hayes","year":"2024"},{"key":"ref15","article-title":"PKI as the foundation for zero trust","author":"Hojjati","year":"2022"},{"key":"ref16","volume-title":"Legacy PKI Is Broken: Why Now Is the Time to Transition To PKI-as-a-Service","year":"2023"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3174679"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2023.3345665"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103827"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103412"},{"key":"ref21","article-title":"Why bad certificates happen: A meta analysis of PKI failures","author":"Serrano","year":"2020"},{"key":"ref22","article-title":"A complete study of PKI (PKI\u2019s known incidents)","volume-title":"Proc. 47th Res. Conf. Commun., Inf. Internet Policy","author":"Serrano"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987462"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00027"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1093\/cybsec\/tyab025"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.4913651"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2022.3157356"},{"key":"ref28","first-page":"19","article-title":"Global authentication in an untrustworthy world","volume-title":"Proc. 14th USENIX Workshop Hot Topics Operating Syst.","author":"Abadi"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2674005.2674991"},{"key":"ref30","first-page":"399","article-title":"Crying wolf: An empirical study of SSL warning effectiveness","volume-title":"Proc. USENIX Secur. Symp.","author":"Sunshine"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CTC.2014.8"},{"key":"ref32","article-title":"An observatory for the SSLiverse","volume-title":"Proc. DEFCON","author":"Eckersley"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.23919\/TMA.2019.8784633"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3626111.3630268"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-56252-5_14"}],"container-title":["IEEE Journal on Selected Areas in Communications"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/49\/11018060\/10963977.pdf?arnumber=10963977","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,30]],"date-time":"2025-05-30T06:09:59Z","timestamp":1748585399000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10963977\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6]]},"references-count":35,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/jsac.2025.3560006","relation":{},"ISSN":["1558-0008","0733-8716"],"issn-type":[{"value":"1558-0008","type":"electronic"},{"value":"0733-8716","type":"print"}],"subject":[],"published":{"date-parts":[[2025,6]]}}}