{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,13]],"date-time":"2026-05-13T12:50:02Z","timestamp":1778676602307,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":49,"publisher":"ACM","license":[{"start":{"date-parts":[[2013,5,13]],"date-time":"2013-05-13T00:00:00Z","timestamp":1368403200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2013,5,13]]},"DOI":"10.1145\/2488388.2488395","type":"proceedings-article","created":{"date-parts":[[2016,2,5]],"date-time":"2016-02-05T20:43:24Z","timestamp":1454705004000},"page":"59-70","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":51,"title":["Here's my cert, so trust me, maybe?"],"prefix":"10.1145","author":[{"given":"Devdatta","family":"Akhawe","sequence":"first","affiliation":[{"name":"University of California, Berkeley, Berkeley, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Johanna","family":"Amann","sequence":"additional","affiliation":[{"name":"International Computer Science Institute, Berkeley, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Matthias","family":"Vallentin","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, Berkeley, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Robin","family":"Sommer","sequence":"additional","affiliation":[{"name":"International Computer Science Institute, Berkeley, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2013,5,13]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Code Release. http:\/\/is.gd\/pxe5e6.  Code Release. http:\/\/is.gd\/pxe5e6."},{"key":"e_1_3_2_1_2_1","volume-title":"ICSI","author":"Amann J.","year":"2012","unstructured":"Amann , J. , Vallentin , M. , Hall , S. , and Sommer , R . Extracting Certificates from Live Traffic: A Near Real-Time SSL Notary Service. TR-12-014 , ICSI Nov. 2012 . http:\/\/is.gd\/EMt2Kz. Amann, J., Vallentin, M., Hall, S., and Sommer, R. Extracting Certificates from Live Traffic: A Near Real-Time SSL Notary Service. TR-12-014, ICSI Nov. 2012. http:\/\/is.gd\/EMt2Kz."},{"key":"e_1_3_2_1_3_1","volume-title":"Oct","author":"Barth A.","year":"2011","unstructured":"Barth , A. X- Script-Origin , we hardly knew ye , Oct 2011 . http:\/\/is.gd\/PvWp5w. Barth, A. X-Script-Origin, we hardly knew ye, Oct 2011. http:\/\/is.gd\/PvWp5w."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/2073276.2073284"},{"key":"e_1_3_2_1_5_1","unstructured":"Chromium Authors. HSTS Preload and Certificate Pinning List. http:\/\/is.gd\/1Hfvxe.  Chromium Authors. HSTS Preload and Certificate Pinning List. http:\/\/is.gd\/1Hfvxe."},{"key":"e_1_3_2_1_6_1","unstructured":"Convergence. http:\/\/www.convergence.io.  Convergence. http:\/\/www.convergence.io."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5280"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1124772.1124861"},{"key":"e_1_3_2_1_9_1","volume-title":"Proc. of USENIX Security Symp.","author":"Dreger H.","year":"2006","unstructured":"Dreger , H. , Feldmann , A. , Mai , M. , Paxson , V. , and Sommer , R . Dynamic Application-Layer Protocol Analysis for Network Intrusion Detection . In Proc. of USENIX Security Symp. ( 2006 ). Dreger, H., Feldmann, A., Mai, M., Paxson, V., and Sommer, R. Dynamic Application-Layer Protocol Analysis for Network Intrusion Detection. In Proc. of USENIX Security Symp. (2006)."},{"key":"e_1_3_2_1_10_1","volume-title":"Jan.","author":"Eastlake D.","year":"2011","unstructured":"Eastlake , D. Transport Layer Security (TLS) Extensions: Extension Definitions. RFC 6066 (Proposed Standard) , Jan. 2011 . Eastlake, D. Transport Layer Security (TLS) Extensions: Extension Definitions. RFC 6066 (Proposed Standard), Jan. 2011."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1357054.1357219"},{"key":"e_1_3_2_1_12_1","unstructured":"The EFF SSL Observatory. https:\/\/www.eff.org\/observatory.  The EFF SSL Observatory. https:\/\/www.eff.org\/observatory."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382205"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382204"},{"key":"e_1_3_2_1_16_1","volume-title":"Http strict transport security (hsts). RFC","author":"Hodges J.","year":"2012","unstructured":"Hodges , J. , Jackson , C. , and Barth , A . Http strict transport security (hsts). RFC 6797 Nov. 2012 . Hodges, J., Jackson, C., and Barth, A. Http strict transport security (hsts). RFC 6797 Nov. 2012."},{"key":"e_1_3_2_1_17_1","volume-title":"The DNS-Based Authentication of Named Entities (DANE): TLSA Protocol. RFC","author":"Hoffman P.","year":"2012","unstructured":"Hoffman , P. , and Schlyter , J . The DNS-Based Authentication of Named Entities (DANE): TLSA Protocol. RFC 6698, Aug. 2012 . Hoffman, P., and Schlyter, J. The DNS-Based Authentication of Named Entities (DANE): TLSA Protocol. RFC 6698, Aug. 2012."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068856"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1572532.1572578"},{"key":"e_1_3_2_1_20_1","volume-title":"Response strategies for coping with the cognitive demands of attitude measures in surveys. Applied cognitive psychology 5, 3","author":"Krosnick J.","year":"1991","unstructured":"Krosnick , J. Response strategies for coping with the cognitive demands of attitude measures in surveys. Applied cognitive psychology 5, 3 ( 1991 ), 213--236. Krosnick, J. Response strategies for coping with the cognitive demands of attitude measures in surveys. Applied cognitive psychology 5, 3 (1991), 213--236."},{"key":"e_1_3_2_1_21_1","unstructured":"Langley A. Revocation checking and Chrome's CRL. http:\/\/is.gd\/2rg7SS Feb. 2012.  Langley A. Revocation checking and Chrome's CRL. http:\/\/is.gd\/2rg7SS Feb. 2012."},{"key":"e_1_3_2_1_22_1","volume-title":"Feb.","author":"Langley A.","year":"2012","unstructured":"Langley , A. SSL Interstitial Bypass Rates , Feb. 2012 . http:\/\/is.gd\/hPErbv Langley, A. SSL Interstitial Bypass Rates, Feb. 2012. http:\/\/is.gd\/hPErbv"},{"key":"e_1_3_2_1_23_1","unstructured":"Laurie B. Langley A. and Kasper E. Certificate Authority Transparency and Auditability. http:\/\/www.certificate-transparency.org\/.  Laurie B. Langley A. and Kasper E. Certificate Authority Transparency and Auditability. http:\/\/www.certificate-transparency.org\/."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2011.367"},{"key":"e_1_3_2_1_25_1","volume-title":"Whit is right. IACR eprint archive 64","author":"Lenstra A.","year":"2012","unstructured":"Lenstra , A. , Hughes , J. , Augier , M. , Bos , J. , Kleinjung , T. , and Wachter , C . Ron was wrong , Whit is right. IACR eprint archive 64 ( 2012 ). Lenstra, A., Hughes, J., Augier, M., Bos, J., Kleinjung, T., and Wachter, C. Ron was wrong, Whit is right. IACR eprint archive 64 (2012)."},{"key":"e_1_3_2_1_26_1","unstructured":"StartSSL Free. https:\/\/www.startssl.com.  StartSSL Free. https:\/\/www.startssl.com."},{"key":"e_1_3_2_1_27_1","unstructured":"MozillaWiki: Mobile Web Evangelism. https:\/\/wiki.mozilla.org\/Mobile\/Evangelism.  MozillaWiki: Mobile Web Evangelism. https:\/\/wiki.mozilla.org\/Mobile\/Evangelism."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1837110.1837112"},{"key":"e_1_3_2_1_29_1","unstructured":"Mozilla Bugzilla. Bug 364667: Tolerate mismatch between certificate host and actual host if the difference is only \"www.\". https:\/\/bugzil.la\/364667.  Mozilla Bugzilla. Bug 364667: Tolerate mismatch between certificate host and actual host if the difference is only \"www.\". https:\/\/bugzil.la\/364667."},{"key":"e_1_3_2_1_30_1","unstructured":"Mozilla Bugzilla. Bug 634074: Cannot validate valid certificate chain when looping\/cross-signed certs are involved. https:\/\/bugzil.la\/634074.  Mozilla Bugzilla. Bug 634074: Cannot validate valid certificate chain when looping\/cross-signed certs are involved. https:\/\/bugzil.la\/634074."},{"key":"e_1_3_2_1_31_1","unstructured":"Mozilla Bugzilla. Bug 657228 -- Preload all known intermediate certificates for CAs in our root store. https:\/\/bugzil.la\/657228.  Mozilla Bugzilla. Bug 657228 -- Preload all known intermediate certificates for CAs in our root store. https:\/\/bugzil.la\/657228."},{"key":"e_1_3_2_1_32_1","unstructured":"Mozilla Bugzilla. Bug 806281: NSS doesn't use publicsuffix list. https:\/\/bugzil.la\/806281.  Mozilla Bugzilla. Bug 806281: NSS doesn't use publicsuffix list. https:\/\/bugzil.la\/806281."},{"key":"e_1_3_2_1_33_1","unstructured":"Mozilla Bugzilla. Bug 808331: Intermediates Cached in Private Browsing Mode. https:\/\/bugzil.la\/808331.  Mozilla Bugzilla. Bug 808331: Intermediates Cached in Private Browsing Mode. https:\/\/bugzil.la\/808331."},{"key":"e_1_3_2_1_34_1","unstructured":"Mozilla Bugzilla. Tech Evangelism Bugs. http:\/\/is.gd\/sqCtFm.  Mozilla Bugzilla. Tech Evangelism Bugs. http:\/\/is.gd\/sqCtFm."},{"key":"e_1_3_2_1_35_1","unstructured":"MozillaWiki: Maintaining Confidence in Root Certificates. http:\/\/is.gd\/gnGt0M.  MozillaWiki: Maintaining Confidence in Root Certificates. http:\/\/is.gd\/gnGt0M."},{"key":"e_1_3_2_1_36_1","unstructured":"Network Security Services (NSS). https:\/\/www.mozilla.org\/projects\/security\/pki\/nss\/.  Network Security Services (NSS). https:\/\/www.mozilla.org\/projects\/security\/pki\/nss\/."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"e_1_3_2_1_38_1","unstructured":"Public Suffix List. http:\/\/publicsuffix.org.  Public Suffix List. http:\/\/publicsuffix.org."},{"key":"e_1_3_2_1_39_1","volume-title":"May","author":"Rescorla E.","year":"2000","unstructured":"Rescorla , E. HTTP Over TLS. RFC 2818 (Informational) , May 2000 . Rescorla, E. HTTP Over TLS. RFC 2818 (Informational), May 2000."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6125"},{"key":"e_1_3_2_1_41_1","volume-title":"June","author":"Santesson S.","year":"2011","unstructured":"Santesson , S. , and Hallam-Baker , P. Online Certificate Status Protocol Algorithm Agility. RFC 6277 (Proposed Standard) , June 2011 . Santesson, S., and Hallam-Baker, P. Online Certificate Status Protocol Algorithm Agility. RFC 6277 (Proposed Standard), June 2011."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-27576-0_20"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/2078827.2078831"},{"key":"e_1_3_2_1_44_1","volume-title":"Proceedings of the 18th Usenix Security Symposium","author":"Sunshine J.","year":"2009","unstructured":"Sunshine , J. , Egelman , S. , Almuhimedi , H. , Atri , N. , and Cranor , L. F . Crying Wolf: An Empirical Study of SSL Warning Effectiveness . In Proceedings of the 18th Usenix Security Symposium ( 2009 ). Sunshine, J., Egelman, S., Almuhimedi, H., Atri, N., and Cranor, L. F. Crying Wolf: An Empirical Study of SSL Warning Effectiveness. In Proceedings of the 18th Usenix Security Symposium (2009)."},{"key":"e_1_3_2_1_45_1","unstructured":"EFF\n  : The Sovereign Keys Project. https:\/\/www.eff.org\/sovereign-keys.  EFF: The Sovereign Keys Project. https:\/\/www.eff.org\/sovereign-keys."},{"key":"e_1_3_2_1_46_1","volume-title":"Proc. of WEIS","author":"Vratonjic N.","year":"2011","unstructured":"Vratonjic , N. , Freudiger , J. , Bindschaedler , V. , and Hubaux , J . The inconvenient truth about web certificates . In Proc. of WEIS ( 2011 ), 79--117. Vratonjic, N., Freudiger, J., Bindschaedler, V., and Hubaux, J. The inconvenient truth about web certificates. In Proc. of WEIS (2011), 79--117."},{"key":"e_1_3_2_1_47_1","volume-title":"Perspectives: Improving SSH-style Host Authentication with Multi-Path Probing. USENIX ATC","author":"Wendlandt D.","year":"2008","unstructured":"Wendlandt , D. , Andersen , D. G. , and Perrig , A . Perspectives: Improving SSH-style Host Authentication with Multi-Path Probing. USENIX ATC ( 2008 ). Wendlandt, D., Andersen, D. G., and Perrig, A. Perspectives: Improving SSH-style Host Authentication with Multi-Path Probing. USENIX ATC (2008)."},{"key":"e_1_3_2_1_48_1","first-page":"137","volume-title":"Proc. of Graphics Interface 2005","author":"Whalen T.","year":"2005","unstructured":"Whalen , T. , and Inkpen , K . Gathering evidence: use of visual security cues in web browsers . In Proc. of Graphics Interface 2005 ( 2005 ), pp. 137 -- 144 . Whalen, T., and Inkpen, K. Gathering evidence: use of visual security cues in web browsers. In Proc. of Graphics Interface 2005 (2005), pp. 137--144."},{"key":"e_1_3_2_1_49_1","unstructured":"Wikipedia. Accuracy of Ranking by Alexa Toolbar.  Wikipedia. Accuracy of Ranking by Alexa Toolbar."}],"event":{"name":"WWW '13: 22nd International World Wide Web Conference","location":"Rio de Janeiro Brazil","acronym":"WWW '13","sponsor":["NICBR Nucleo de Informatcao e Coordenacao do Ponto BR","CGIBR Comite Gestor da Internet no Brazil","SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the 22nd international conference on World Wide Web"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2488388.2488395","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2488388.2488395","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T08:48:41Z","timestamp":1750236521000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2488388.2488395"}},"subtitle":["understanding TLS errors on the web"],"short-title":[],"issued":{"date-parts":[[2013,5,13]]},"references-count":49,"alternative-id":["10.1145\/2488388.2488395","10.1145\/2488388"],"URL":"https:\/\/doi.org\/10.1145\/2488388.2488395","relation":{},"subject":[],"published":{"date-parts":[[2013,5,13]]},"assertion":[{"value":"2013-05-13","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}