{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,26]],"date-time":"2026-03-26T09:47:05Z","timestamp":1774518425210,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":52,"publisher":"ACM","license":[{"start":{"date-parts":[[2016,10,28]],"date-time":"2016-10-28T00:00:00Z","timestamp":1477612800000},"content-version":"vor","delay-in-days":366,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1054233, CNS-1409191, CNS-1319019, CNS-1421444, CNS-1345284"],"award-info":[{"award-number":["CNS-1054233, CNS-1409191, CNS-1319019, CNS-1421444, CNS-1345284"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006831","name":"U.S. Air Force","doi-asserted-by":"publisher","award":["FA8750-14-2-0150"],"award-info":[{"award-number":["FA8750-14-2-0150"]}],"id":[{"id":"10.13039\/100006831","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,10,28]]},"DOI":"10.1145\/2815675.2815685","type":"proceedings-article","created":{"date-parts":[[2015,10,27]],"date-time":"2015-10-27T08:37:04Z","timestamp":1445935024000},"page":"183-196","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":106,"title":["An End-to-End Measurement of Certificate Revocation in the Web's PKI"],"prefix":"10.1145","author":[{"given":"Yabing","family":"Liu","sequence":"first","affiliation":[{"name":"Northeastern University, Boston, MA, USA"}]},{"given":"Will","family":"Tome","sequence":"additional","affiliation":[{"name":"Northeastern University, Boston, MA, USA"}]},{"given":"Liang","family":"Zhang","sequence":"additional","affiliation":[{"name":"Northeastern University, Boston, MA, USA"}]},{"given":"David","family":"Choffnes","sequence":"additional","affiliation":[{"name":"Northeastern University, Boston, MA, USA"}]},{"given":"Dave","family":"Levin","sequence":"additional","affiliation":[{"name":"University of Maryland, College Park, MD, USA"}]},{"given":"Bruce","family":"Maggs","sequence":"additional","affiliation":[{"name":"Duke University and Akamai Technologies, Durham, NC, USA"}]},{"given":"Alan","family":"Mislove","sequence":"additional","affiliation":[{"name":"Northeastern University, Boston, MA, USA"}]},{"given":"Aaron","family":"Schulman","sequence":"additional","affiliation":[{"name":"Stanford University, Palo Alto, CA, USA"}]},{"given":"Christo","family":"Wilson","sequence":"additional","affiliation":[{"name":"Northeastern University, Boston, MA, USA"}]}],"member":"320","published-online":{"date-parts":[[2015,10,28]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Mozilla Developer Network","author":"Services Network Security","year":"2014","unstructured":"Network Security Services. Mozilla Developer Network, 2014. http:\/\/mzl.la\/1DRKqGZ."},{"key":"e_1_3_2_1_2_1","volume-title":"The Chromium Projects","year":"2015","unstructured":"CRLSets. The Chromium Projects, 2015. http:\/\/bit.ly\/1JPsUeC."},{"key":"e_1_3_2_1_3_1","volume-title":"The Chromium Projects","author":"Stack Network","year":"2015","unstructured":"Network Stack. The Chromium Projects, 2015. http:\/\/bit.ly\/1GYuMhE."},{"key":"e_1_3_2_1_4_1","volume-title":"Int. Math., 1(4)","author":"Andrei B.","year":"2004","unstructured":"B. Andrei and M. Michael. Network applications of bloom filters: A survey. Int. Math., 1(4), 2004."},{"key":"e_1_3_2_1_5_1","unstructured":"C. Arthur. DigiNotar SSL certificate hack amounts to cyberwar says expert. The Guardian. http:\/\/www.theguardian.com\/technology\/2011\/sep\/05\/diginotar-certificate-hack-cyberwar."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/2534766.2534789"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2488388.2488395"},{"key":"e_1_3_2_1_8_1","unstructured":"An Evaluation of the Effectiveness of Chrome's CRLSets. Gibson Research Corporation. https:\/\/www.grc.com\/revocation\/crlsets.htm."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663759"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.15"},{"key":"e_1_3_2_1_11_1","volume-title":"IETF","author":"Cooper D.","year":"2008","unstructured":"D. Cooper, S. Santesson, S. Farrell, S. Boeyen, R. Housley, and W. Polk. Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile. RFC 5280, IETF, 2008."},{"key":"e_1_3_2_1_12_1","unstructured":"Convergence. http:\/\/convergence.io."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663755"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504755"},{"issue":"1","key":"e_1_3_2_1_15_1","volume":"16","author":"Ellison C.","year":"2000","unstructured":"C. Ellison and B. Schneier. Ten Risks of PKI: What You're not Being Told about Public Key Infrastructure. Computer Security Journal, 16(1), 2000.","journal-title":"Computer Security Journal"},{"key":"e_1_3_2_1_16_1","unstructured":"EFF SSL Observatory. https:\/\/www.eff.org\/observatory."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.5555\/1768570.1768582"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382205"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382204"},{"key":"e_1_3_2_1_20_1","volume-title":"Engineering Security","author":"Gutmann P.","year":"2014","unstructured":"P. Gutmann. Engineering Security. 2014. https:\/\/www.cs.auckland.ac.nz\/ pgut001\/pubs\/book.pdf."},{"key":"e_1_3_2_1_21_1","volume-title":"Security Certificate Revocation Awareness Test","author":"Gibson S.","year":"2014","unstructured":"S. Gibson. Security Certificate Revocation Awareness Test. 2014. https:\/\/www.grc.com\/revocation.htm."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068856"},{"key":"e_1_3_2_1_23_1","unstructured":"ICSI SSL Notary. http:\/\/notary.icsi.berkeley.edu."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/2488388.2488448"},{"key":"e_1_3_2_1_25_1","volume-title":"Smaller than Bloom filters","author":"Langley A.","year":"2011","unstructured":"A. Langley. Smaller than Bloom filters. 2011. https:\/\/www.imperialviolet.org\/2011\/04\/29\/filters.html."},{"key":"e_1_3_2_1_26_1","volume-title":"Revocation checking and Chrome's CRL","author":"Langley A.","year":"2012","unstructured":"A. Langley. Revocation checking and Chrome's CRL. 2012. https:\/\/www.imperialviolet.org\/2012\/02\/05\/crlsets.html."},{"key":"e_1_3_2_1_27_1","volume-title":"Revocation still doesn't work","author":"Langley A.","year":"2014","unstructured":"A. Langley. Revocation still doesn't work. 2014. https:\/\/www.imperialviolet.org\/2014\/04\/29\/revocationagain.html."},{"key":"e_1_3_2_1_28_1","volume-title":"don't enable revocation checking","author":"Langley A.","year":"2014","unstructured":"A. Langley. No, don't enable revocation checking. 2014. https:\/\/www.imperialviolet.org\/2014\/04\/19\/revchecking.html."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6962"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2751323.2751324"},{"key":"e_1_3_2_1_31_1","unstructured":"Mozilla piles on China's SSL cert overlord: We don't trust you either. http:\/\/bit.ly\/1GBPwfG."},{"key":"e_1_3_2_1_32_1","volume-title":"How certificate revocation (doesn't) work in practice","year":"2013","unstructured":"NetCraft. How certificate revocation (doesn't) work in practice. 2013. http:\/\/news.netcraft.com\/archives\/2013\/05\/13\/how-certificate-revocation-doesnt-work-in-practice.html."},{"key":"e_1_3_2_1_33_1","volume-title":"OCSP Server Performance","year":"2013","unstructured":"NetCraft. OCSP Server Performance in April 2013. 2013. http:\/\/news.netcraft.com\/archives\/2013\/05\/23\/ocsp-server-performance-in-april-2013.html."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.5555\/358551"},{"key":"e_1_3_2_1_35_1","unstructured":"OS X Yosemite: List of available trusted root certificates. https:\/\/support.apple.com\/en-us\/HT202858."},{"key":"e_1_3_2_1_36_1","volume-title":"You Won't Be Needing These Any More: On Removing Unused Certificates from Trust Stores. FC","author":"Perl H.","year":"2014","unstructured":"H. Perl, S. Fahl, and M. Smith. You Won't Be Needing These Any More: On Removing Unused Certificates from Trust Stores. FC, 2014."},{"key":"e_1_3_2_1_37_1","volume-title":"IETF","author":"Pettersen Y.","year":"2013","unstructured":"Y. Pettersen. The Transport Layer Security (TLS) Multiple Certificate Status Request Extension. RFC 6961 (Proposed Standard), IETF, 2013."},{"key":"e_1_3_2_1_38_1","unstructured":"Qualys SSL Pulse. https:\/\/www.trustworthyinternet.org\/ssl-pulse\/."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23379"},{"key":"e_1_3_2_1_40_1","unstructured":"Rapid7 SSL Certificate Scans. https:\/\/scans.io\/study\/sonar.ssl."},{"key":"e_1_3_2_1_41_1","unstructured":"Revoking Intermediate Certificates: Introducing OneCRL. Mozilla Security Blog. http:\/\/mzl.la\/1zLFp7M."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660376"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660355"},{"key":"e_1_3_2_1_44_1","volume-title":"IETF","author":"Santesson S.","year":"2013","unstructured":"S. Santesson, M. Myers, R. Ankney, A. Malpani, S. Galperin, and C. Adams. X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP. RFC 6960 (Proposed Standard), IETF, 2013."},{"key":"e_1_3_2_1_45_1","unstructured":"StartSSL: Frequently Asked Questions. https:\/\/www.startssl.com\/?app=25."},{"key":"e_1_3_2_1_46_1","volume-title":"Towards Short-Lived Certificates. W2SP","author":"Topalovic E.","year":"2012","unstructured":"E. Topalovic, B. Saeta, L.-S. Huang, C. Jackson, and D. Boneh. Towards Short-Lived Certificates. W2SP, 2012."},{"key":"e_1_3_2_1_47_1","volume-title":"TLSA","author":"Based The","year":"2012","unstructured":"The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA. 2012. https:\/\/tools.ietf.org\/html\/rfc6698."},{"key":"e_1_3_2_1_48_1","unstructured":"Trustwave to escape 'death penalty' for SSL skeleton key. http:\/\/bit.ly\/1RbPlNe."},{"key":"e_1_3_2_1_49_1","unstructured":"University of Michigan Daily Full IPv4 HTTPS Handshakes. https:\/\/scans.io\/series\/https-full-ipv4."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/2674005.2675015"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/1644893.1644896"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663758"}],"event":{"name":"IMC '15: Internet Measurement Conference","location":"Tokyo Japan","acronym":"IMC '15","sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","SIGCOMM ACM Special Interest Group on Data Communication","USENIX Assoc USENIX Assoc"]},"container-title":["Proceedings of the 2015 Internet Measurement Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2815675.2815685","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2815675.2815685","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2815675.2815685","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T09:26:12Z","timestamp":1763457972000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2815675.2815685"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,10,28]]},"references-count":52,"alternative-id":["10.1145\/2815675.2815685","10.1145\/2815675"],"URL":"https:\/\/doi.org\/10.1145\/2815675.2815685","relation":{},"subject":[],"published":{"date-parts":[[2015,10,28]]},"assertion":[{"value":"2015-10-28","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}