{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,29]],"date-time":"2026-09-29T13:50:23Z","timestamp":1790689823794,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":39,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,5,24]],"date-time":"2021-05-24T00:00:00Z","timestamp":1621814400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Research Foundation of Korea","award":["NRF-2016M3C4A7952587"],"award-info":[{"award-number":["NRF-2016M3C4A7952587"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,5,24]]},"DOI":"10.1145\/3433210.3453107","type":"proceedings-article","created":{"date-parts":[[2021,6,4]],"date-time":"2021-06-04T15:26:39Z","timestamp":1622820399000},"page":"475-487","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["Analyzing Spatial Differences in the TLS Security of Delegated Web Services"],"prefix":"10.1145","author":[{"given":"Joonhee","family":"Lee","sequence":"first","affiliation":[{"name":"Seoul National University, Seoul, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hyunwoo","family":"Lee","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jongheon","family":"Jeong","sequence":"additional","affiliation":[{"name":"Seoul National University, Seoul, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Doowon","family":"Kim","sequence":"additional","affiliation":[{"name":"University of Tennessee, Knoxville, Knoxville, TN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ted Taekyoung","family":"Kwon","sequence":"additional","affiliation":[{"name":"Seoul National University, Seoul, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,6,4]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"crossref","unstructured":"Donald E. Eastlake 3rd. 2011. Transport Layer Security (TLS) Extensions: Extension Definitions. RFC 6066. https:\/\/doi.org\/10.17487\/RFC6066  Donald E. Eastlake 3rd. 2011. Transport Layer Security (TLS) Extensions: Extension Definitions. RFC 6066. https:\/\/doi.org\/10.17487\/RFC6066","DOI":"10.17487\/rfc6066"},{"key":"e_1_3_2_2_2_1","volume-title":"Let's Encrypt: An Automated Certificate Authority to Encrypt the Entire Web (CCS '19)","author":"Aas Josh","year":"1953","unstructured":"Josh Aas , Richard Barnes , Benton Case , Zakir Durumeric , Peter Eckersley , Alan Flores-L\u00f3pez , J. Alex Halderman , Jacob Hoffman-Andrews , James Kasten , Eric Rescorla , Seth Schoen , and Brad Warren . 2019. Let's Encrypt: An Automated Certificate Authority to Encrypt the Entire Web (CCS '19) . Association for Computing Machinery , New York, NY, USA , 2473--2487. https:\/\/doi.org\/10.1145\/33 1953 5.3363192 Josh Aas, Richard Barnes, Benton Case, Zakir Durumeric, Peter Eckersley, Alan Flores-L\u00f3pez, J. Alex Halderman, Jacob Hoffman-Andrews, James Kasten, Eric Rescorla, Seth Schoen, and Brad Warren. 2019. Let's Encrypt: An Automated Certificate Authority to Encrypt the Entire Web (CCS '19). Association for Computing Machinery, New York, NY, USA, 2473--2487. https:\/\/doi.org\/10.1145\/3319535.3363192"},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813707"},{"key":"e_1_3_2_2_4_1","volume-title":"Proceedings of the 2013 IEEE Symposium on Security and Privacy (SP '13)","author":"Nadhem","year":"2013","unstructured":"Nadhem J. Al Fardan and Kenneth G. Paterson. 2013. Lucky Thirteen: Breaking the TLS and DTLS Record Protocols . In Proceedings of the 2013 IEEE Symposium on Security and Privacy (SP '13) . IEEE Computer Society, USA, 526--540. https:\/\/doi.org\/10.1109\/SP. 2013 .42 Nadhem J. Al Fardan and Kenneth G. Paterson. 2013. Lucky Thirteen: Breaking the TLS and DTLS Record Protocols. In Proceedings of the 2013 IEEE Symposium on Security and Privacy (SP '13). IEEE Computer Society, USA, 526--540. https:\/\/doi.org\/10.1109\/SP.2013.42"},{"key":"e_1_3_2_2_5_1","volume-title":"Proceedings of the 22nd USENIX Conference on Security (Washington, D.C.) (SEC '13)","author":"AlFardan Nadhem J.","unstructured":"Nadhem J. AlFardan , Daniel J. Bernstein , Kenneth G. Paterson , Bertram Poettering , and Jacob C. N. Schuldt . 2013. On the Security of RC4 in TLS . In Proceedings of the 22nd USENIX Conference on Security (Washington, D.C.) (SEC '13) . USENIX Association, USA, 305--320. Nadhem J. AlFardan, Daniel J. Bernstein, Kenneth G. Paterson, Bertram Poettering, and Jacob C. N. Schuldt. 2013. On the Security of RC4 in TLS. In Proceedings of the 22nd USENIX Conference on Security (Washington, D.C.) (SEC '13). USENIX Association, USA, 305--320."},{"key":"e_1_3_2_2_6_1","volume-title":"Proceedings of the 25th USENIX Conference on Security Symposium","author":"Aviram Nimrod","year":"2016","unstructured":"Nimrod Aviram , Sebastian Schinzel , Juraj Somorovsky , Nadia Heninger , Maik Dankel , Jens Steube , Luke Valenta , David Adrian , J. Alex Halderman , Viktor Dukhovni , Emilia K\"asper, Shaanan Cohney , Susanne Engels , Christof Paar , and Yuval Shavitt . 2016 . DROWN: Breaking TLS Using SSLv2 . In Proceedings of the 25th USENIX Conference on Security Symposium ( Austin, TX, USA) (SEC '16). USENIX Association, USA, 689--706. Nimrod Aviram, Sebastian Schinzel, Juraj Somorovsky, Nadia Heninger, Maik Dankel, Jens Steube, Luke Valenta, David Adrian, J. Alex Halderman, Viktor Dukhovni, Emilia K\"asper, Shaanan Cohney, Susanne Engels, Christof Paar, and Yuval Shavitt. 2016. DROWN: Breaking TLS Using SSLv2. In Proceedings of the 25th USENIX Conference on Security Symposium (Austin, TX, USA) (SEC '16). USENIX Association, USA, 689--706."},{"key":"e_1_3_2_2_7_1","first-page":"2","article-title":"A Messy State of the Union","volume":"60","author":"Beurdouche Benjamin","year":"2017","unstructured":"Benjamin Beurdouche , Karthikeyan Bhargavan , Antoine Delignat-Lavaud , C\u00e9dric Fournet , Markulf Kohlweiss , Alfredo Pironti , Pierre-Yves Strub , and Jean Karim Zinzindohoue . 2017 . A Messy State of the Union : Taming the Composite State Machines of TLS. Commun. ACM , Vol. 60 , 2 (Jan. 2017), 99--107. https:\/\/doi.org\/10.1145\/3023357 Benjamin Beurdouche, Karthikeyan Bhargavan, Antoine Delignat-Lavaud, C\u00e9dric Fournet, Markulf Kohlweiss, Alfredo Pironti, Pierre-Yves Strub, and Jean Karim Zinzindohoue. 2017. A Messy State of the Union: Taming the Composite State Machines of TLS. Commun. ACM, Vol. 60, 2 (Jan. 2017), 99--107. https:\/\/doi.org\/10.1145\/3023357","journal-title":"Taming the Composite State Machines of TLS. Commun. ACM"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23418"},{"key":"e_1_3_2_2_9_1","volume-title":"The CAIDA UCSD AS to Organization Mapping Dataset. https:\/\/www.caida.org\/data\/as-organizations\/ Retrieved","author":"CAIDA.","year":"2020","unstructured":"CAIDA. 2020. The CAIDA UCSD AS to Organization Mapping Dataset. https:\/\/www.caida.org\/data\/as-organizations\/ Retrieved April 10, 2020 from CAIDA. 2020. The CAIDA UCSD AS to Organization Mapping Dataset. https:\/\/www.caida.org\/data\/as-organizations\/ Retrieved April 10, 2020 from"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"crossref","unstructured":"Carlo Contavalli Wilmer van der Gaast David C Lawrence and Warren \"Ace\" Kumari. 2016. Client Subnet in DNS Queries. RFC 7871. https:\/\/doi.org\/10.17487\/RFC7871  Carlo Contavalli Wilmer van der Gaast David C Lawrence and Warren \"Ace\" Kumari. 2016. Client Subnet in DNS Queries. RFC 7871. https:\/\/doi.org\/10.17487\/RFC7871","DOI":"10.17487\/RFC7871"},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23374"},{"key":"e_1_3_2_2_12_1","unstructured":"Thai Duong and Juliano Rizzo. 2011. Here Come the $bigoplus$ Ninjas.  Thai Duong and Juliano Rizzo. 2011. Here Come the $bigoplus$ Ninjas."},{"key":"e_1_3_2_2_13_1","volume-title":"Proceedings of the 2014 Conference on Internet Measurement Conference","author":"Durumeric Zakir","unstructured":"Zakir Durumeric , Frank Li , James Kasten , Johanna Amann , Jethro Beekman , Mathias Payer , Nicolas Weaver , David Adrian , Vern Paxson , Michael Bailey , and J. Alex Halderman . 2014. The Matter of Heartbleed . In Proceedings of the 2014 Conference on Internet Measurement Conference ( Vancouver, BC, Canada) (IMC '14). Association for Computing Machinery, New York, NY, USA, 475--488. https:\/\/doi.org\/10.1145\/2663716.2663755 Zakir Durumeric, Frank Li, James Kasten, Johanna Amann, Jethro Beekman, Mathias Payer, Nicolas Weaver, David Adrian, Vern Paxson, Michael Bailey, and J. Alex Halderman. 2014. The Matter of Heartbleed. In Proceedings of the 2014 Conference on Internet Measurement Conference (Vancouver, BC, Canada) (IMC '14). Association for Computing Machinery, New York, NY, USA, 475--488. https:\/\/doi.org\/10.1145\/2663716.2663755"},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23456"},{"key":"e_1_3_2_2_15_1","volume-title":"Hickman","author":"Elgamal Taher","year":"1995","unstructured":"Taher Elgamal and Kipp E.B . Hickman . 1995 . The SSL Protocol. Internet-Draft draft-hickman-netscape-ssl-00. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-hickman-netscape-ssl-00 Work in Progress . Taher Elgamal and Kipp E.B. Hickman. 1995. The SSL Protocol. Internet-Draft draft-hickman-netscape-ssl-00. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-hickman-netscape-ssl-00 Work in Progress."},{"key":"e_1_3_2_2_16_1","volume-title":"Revised Papers from the 8th Annual International Workshop on Selected Areas in Cryptography (SAC '01)","author":"Fluhrer Scott R.","unstructured":"Scott R. Fluhrer , Itsik Mantin , and Adi Shamir . 2001. Weaknesses in the Key Scheduling Algorithm of RC4 . In Revised Papers from the 8th Annual International Workshop on Selected Areas in Cryptography (SAC '01) . Springer-Verlag , Berlin, Heidelberg , 1--24. Scott R. Fluhrer, Itsik Mantin, and Adi Shamir. 2001. Weaknesses in the Key Scheduling Algorithm of RC4. In Revised Papers from the 8th Annual International Workshop on Selected Areas in Cryptography (SAC '01). Springer-Verlag, Berlin, Heidelberg, 1--24."},{"key":"e_1_3_2_2_17_1","volume-title":"BREACH: Reviving the CRIME Attack. In Black Hat USA 2013","author":"Gluck Yoel","year":"2013","unstructured":"Yoel Gluck , Neal Harris , and Angelo Prado . 2013 . BREACH: Reviving the CRIME Attack. In Black Hat USA 2013 ( Las Vegas, NV, USA). http:\/\/breachattack.com Yoel Gluck, Neal Harris, and Angelo Prado. 2013. BREACH: Reviving the CRIME Attack. In Black Hat USA 2013 (Las Vegas, NV, USA). http:\/\/breachattack.com"},{"key":"e_1_3_2_2_18_1","volume-title":"Google Transparency Report: HTTPS encryption on the web. https:\/\/transparencyreport.google.com\/https Retrieved","year":"2020","unstructured":"Google. 2020. Google Transparency Report: HTTPS encryption on the web. https:\/\/transparencyreport.google.com\/https Retrieved July 29, 2020 from Google. 2020. Google Transparency Report: HTTPS encryption on the web. https:\/\/transparencyreport.google.com\/https Retrieved July 29, 2020 from"},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411740.3411742"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278568"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45719-2_9"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.17"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23547"},{"key":"e_1_3_2_2_24_1","volume-title":"Revised Papers from the 8th International Workshop on Fast Software Encryption (FSE '01)","author":"Mantin Itsik","unstructured":"Itsik Mantin and Adi Shamir . 2001. A Practical Attack on Broadcast RC4 . In Revised Papers from the 8th International Workshop on Fast Software Encryption (FSE '01) . Springer-Verlag , Berlin, Heidelberg , 152--164. Itsik Mantin and Adi Shamir. 2001. A Practical Attack on Broadcast RC4. In Revised Papers from the 8th International Workshop on Fast Software Encryption (FSE '01). Springer-Verlag, Berlin, Heidelberg, 152--164."},{"key":"e_1_3_2_2_25_1","volume-title":"Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). https:\/\/raccoon-attack.com","author":"Merget Robert","year":"2021","unstructured":"Robert Merget , Marcus Brinkmann , Nimrod Aviram , Juraj Somorovsky , Johannes Mittmann , and J\u00f6rg Schwenk . 2021 . Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). https:\/\/raccoon-attack.com Robert Merget, Marcus Brinkmann, Nimrod Aviram, Juraj Somorovsky, Johannes Mittmann, and J\u00f6rg Schwenk. 2021. Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). https:\/\/raccoon-attack.com"},{"key":"e_1_3_2_2_26_1","volume-title":"Security Advisory","volume":"21","author":"M\u00f6ller Bodo","year":"2014","unstructured":"Bodo M\u00f6ller , Thai Duong , and Krzysztof Kotowicz . 2014 . This POODLE Bites: Exploiting The SSL 3.0 Fallback . Security Advisory , Vol. 21 (2014), 34--58. Bodo M\u00f6ller, Thai Duong, and Krzysztof Kotowicz. 2014. This POODLE Bites: Exploiting The SSL 3.0 Fallback. Security Advisory, Vol. 21 (2014), 34--58."},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1080\/01449290410001669914"},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.5555\/1784881.1784904"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"crossref","unstructured":"John Postel. 1981. Internet Control Message Protocol. RFC 792. https:\/\/doi.org\/10.17487\/RFC0792  John Postel. 1981. Internet Control Message Protocol. RFC 792. https:\/\/doi.org\/10.17487\/RFC0792","DOI":"10.17487\/rfc0777"},{"key":"e_1_3_2_2_30_1","volume-title":"Rapid7 Open Data: SSL Certificates. https:\/\/opendata.rapid7.com\/sonar.ssl\/ Retrieved","year":"2020","unstructured":"Rapid7. 2020. Rapid7 Open Data: SSL Certificates. https:\/\/opendata.rapid7.com\/sonar.ssl\/ Retrieved July 29, 2020 from Rapid7. 2020. Rapid7 Open Data: SSL Certificates. https:\/\/opendata.rapid7.com\/sonar.ssl\/ Retrieved July 29, 2020 from"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"crossref","unstructured":"Eric Rescorla. 2018. The Transport Layer Security (TLS) Protocol Version 1.3. RFC 8446. https:\/\/doi.org\/10.17487\/RFC8446  Eric Rescorla. 2018. The Transport Layer Security (TLS) Protocol Version 1.3. RFC 8446. https:\/\/doi.org\/10.17487\/RFC8446","DOI":"10.17487\/RFC8446"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"crossref","unstructured":"Eric Rescorla and Tim Dierks. 2008. The Transport Layer Security (TLS) Protocol Version 1.2. RFC 5246. https:\/\/doi.org\/10.17487\/RFC5246  Eric Rescorla and Tim Dierks. 2008. The Transport Layer Security (TLS) Protocol Version 1.2. RFC 5246. https:\/\/doi.org\/10.17487\/RFC5246","DOI":"10.17487\/rfc5246"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"crossref","unstructured":"Ronald L. Rivest. 1992. The MD5 Message-Digest Algorithm. RFC 1321. https:\/\/doi.org\/10.17487\/RFC1321  Ronald L. Rivest. 1992. The MD5 Message-Digest Algorithm. RFC 1321. https:\/\/doi.org\/10.17487\/RFC1321","DOI":"10.17487\/rfc1321"},{"key":"e_1_3_2_2_34_1","volume-title":"The CRIME Attack. In Ekoparty Security Conference 2012 .","author":"Rizzo Juliano","year":"2012","unstructured":"Juliano Rizzo and Thai Duong . 2012 . The CRIME Attack. In Ekoparty Security Conference 2012 . Juliano Rizzo and Thai Duong. 2012. The CRIME Attack. In Ekoparty Security Conference 2012 ."},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278548"},{"key":"e_1_3_2_2_36_1","volume-title":"Security and Privacy in Communication Networks (SecureComm '10)","author":"Son Sooel","unstructured":"Sooel Son and Vitaly Shmatikov . 2010. The Hitchhiker's Guide to DNS Cache Poisoning . In Security and Privacy in Communication Networks (SecureComm '10) , Sushil Jajodia and Jianying Zhou (Eds.). Springer Berlin Heidelberg, Berlin , Heidelberg , 466--483. Sooel Son and Vitaly Shmatikov. 2010. The Hitchhiker's Guide to DNS Cache Poisoning. In Security and Privacy in Communication Networks (SecureComm '10), Sushil Jajodia and Jianying Zhou (Eds.). Springer Berlin Heidelberg, Berlin, Heidelberg, 466--483."},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196528"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1007\/11535218_2"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1007\/11426639_2"}],"event":{"name":"ASIA CCS '21: ACM Asia Conference on Computer and Communications Security","location":"Virtual Event Hong Kong","acronym":"ASIA CCS '21","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3433210.3453107","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3433210.3453107","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:48:12Z","timestamp":1750193292000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3433210.3453107"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,5,24]]},"references-count":39,"alternative-id":["10.1145\/3433210.3453107","10.1145\/3433210"],"URL":"https:\/\/doi.org\/10.1145\/3433210.3453107","relation":{},"subject":[],"published":{"date-parts":[[2021,5,24]]},"assertion":[{"value":"2021-06-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}