{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,16]],"date-time":"2026-10-16T18:31:45Z","timestamp":1792175505557,"version":"4.4.0"},"reference-count":131,"publisher":"Association for Computing Machinery (ACM)","issue":"13s","license":[{"start":{"date-parts":[[2023,7,13]],"date-time":"2023-07-13T00:00:00Z","timestamp":1689206400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"DND\/NSERC Discovery Grant supplement"},{"name":"Natural Sciences and Engineering Research Council of Canada (NSERC) for both his Canada Research Chair in Authentication and Computer Security, and a Discovery Grant"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Comput. Surv."],"published-print":{"date-parts":[[2023,12,31]]},"abstract":"<jats:p>TLS is an end-to-end protocol designed to provide confidentiality and integrity guarantees that improve end-user security and privacy. While TLS helps defend against pervasive surveillance of intercepted unencrypted traffic, it also hinders several common beneficial operations typically performed by middleboxes on the network traffic. Consequently, various methods have been proposed that \u201cbypass\u201d the confidentiality goals of TLS by playing with keys and certificates essentially in a man-in-the-middle solution, as well as new proposals that extend the protocol to accommodate third parties, delegation schemes to trusted middleboxes, and fine-grained control and verification mechanisms. We first review the use cases expecting plain HTTP traffic and discuss the extent to which TLS hinders these operations. We retain 19 scenarios where access to unencrypted traffic is still relevant and evaluate the incentives of the stakeholders involved. Second, we survey 30 schemes by which TLS no longer delivers end-to-end security and by which the notion of an \u201cend\u201d changes, including caching middleboxes such as Content Delivery Networks. Finally, we compare each scheme based on deployability and security characteristics and evaluate their compatibility with the stakeholders\u2019 incentives. Our analysis leads to a number of key findings, observations, and research questions that we believe will be of interest to practitioners, policy makers, and researchers.<\/jats:p>","DOI":"10.1145\/3580522","type":"journal-article","created":{"date-parts":[[2023,1,24]],"date-time":"2023-01-24T07:04:08Z","timestamp":1674543848000},"page":"1-40","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":28,"title":["A Survey and Analysis of TLS Interception Mechanisms and Motivations: Exploring how end-to-end TLS is made \u201cend-to-me\u201d for web traffic"],"prefix":"10.1145","volume":"55","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2664-3963","authenticated-orcid":false,"given":"Xavier","family":"de Carn\u00e9 de Carnavalet","sequence":"first","affiliation":[{"name":"The Hong Kong Polytechnic University, Hong Kong SAR"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5038-5370","authenticated-orcid":false,"given":"Paul C.","family":"van Oorschot","sequence":"additional","affiliation":[{"name":"Carleton University, Ontario, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,7,13]]},"reference":[{"key":"e_1_3_3_2_2","volume-title":"USENIX Symposium on Networked Systems Design and Implementation (NSDI)","author":"Agababov Victor","year":"2015","unstructured":"Victor Agababov, Michael Buettner, Victor Chudnovsky, Mark Cogan, Ben Greenstein, Shane McDaniel, Michael Piatek, Colin Scott, Matt Welsh, and Bolian Yin. 2015. Flywheel: Google\u2019s data compression proxy for the mobile web. In USENIX Symposium on Networked Systems Design and Implementation (NSDI)."},{"key":"e_1_3_3_3_2","unstructured":"Devdatta Akhawe Frederik Braun Fran\u00e7ois Marier and Joel Weinberger. 2016. Subresource Integrity. Retrieved from https:\/\/www.w3.org\/TR\/SRI\/."},{"key":"e_1_3_3_4_2","doi-asserted-by":"publisher","DOI":"10.1155\/2019\/3107543"},{"key":"e_1_3_3_5_2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2444095"},{"key":"e_1_3_3_6_2","unstructured":"Amazon Elastic Container Service. 2020. Load Balancer Types. Retrieved from https:\/\/docs.aws.amazon.com\/AmazonECS\/latest\/developerguide\/load-balancer-types.html."},{"key":"e_1_3_3_7_2","doi-asserted-by":"publisher","DOI":"10.1145\/3292006.3300025"},{"key":"e_1_3_3_8_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-017-0306-6"},{"key":"e_1_3_3_9_2","unstructured":"Flemming Andreasen Nancy Cam-Winget and Eric Wang. 2019. TLS 1.3 Impact on Network-Based Security. Internet Draft (Informational)."},{"key":"e_1_3_3_10_2","unstructured":"Australian Governement. 2015. Telecommunications (Interception and Access) Amendment (Data Retention) Act 2015. Retrieved from https:\/\/www.legislation.gov.au\/Details\/C2015A00039."},{"key":"e_1_3_3_11_2","doi-asserted-by":"crossref","unstructured":"Fred Baker Bill Foster and Chip Sharp. 2004. Cisco Architecture for Lawful Intercept in IP Networks. RFC 3924 (Informational Track).","DOI":"10.17487\/rfc3924"},{"key":"e_1_3_3_12_2","unstructured":"Richard Barnes Subodh Iyengar Nick Sullivan and Eric Rescorla. 2020. Delegated Credentials for TLS. Internet Draft (Standards Track). Retrieved from https:\/\/tools.ietf.org\/html\/draft-ietf-tls-subcerts-09."},{"key":"e_1_3_3_13_2","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660338"},{"key":"e_1_3_3_14_2","volume-title":"IEEE Symposium on Security and Privacy (S&P)","author":"Bhargavan Karthikeyan","year":"2018","unstructured":"Karthikeyan Bhargavan, Ioana Boureanu, Antoine Delignat-Lavaud, Pierre-Alain Fouque, and Cristina Onete. 2018. A formal treatment of accountable proxying over TLS. In IEEE Symposium on Security and Privacy (S&P)."},{"key":"e_1_3_3_15_2","volume-title":"European Symposium on Security and Privacy (EuroS&P)","author":"Bhargavan Karthikeyan","year":"2017","unstructured":"Karthikeyan Bhargavan, Ioana Boureanu, Pierre-Alain Fouque, Cristina Onete, and Benjamin Richard. 2017. Content delivery over TLS: A cryptographic analysis of keyless SSL. In European Symposium on Security and Privacy (EuroS&P)."},{"key":"e_1_3_3_16_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2017.7876154"},{"key":"e_1_3_3_17_2","unstructured":"BITS Security. 2016. [TLS] Industry Concerns about TLS 1.3. IETF mail (Sep. 22 2016). Retrieved from https:\/\/mailarchive.ietf.org\/arch\/msg\/tls\/KQIyNhPk8K6jOoe2ScdPZ8E08RE\/."},{"key":"e_1_3_3_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom50675.2020.00036"},{"key":"e_1_3_3_19_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-58146-9"},{"key":"e_1_3_3_20_2","unstructured":"Jon Brodkin. 2016. Verizon\u2019s \u201csupercookies\u201d Violated Net Neutrality Transparency Rule. Retrieved from https:\/\/arstechnica.com\/information-technology\/2016\/03\/verizons-supercookies-violated-net-neutrality-transparency-rule\/."},{"key":"e_1_3_3_21_2","volume-title":"USENIX Security Conference","author":"Bulck Jo Van","year":"2018","unstructured":"Jo Van Bulck, Marina Minkin, Ofir Weisse, Daniel Genkin, Baris Kasikci, Frank Piessens, Mark Silberstein, Thomas F. Wenisch, Yuval Yarom, and Raoul Strackx. 2018. Foreshadow: Extracting the keys to the Intel SGX kingdom with transient out-of-order execution. In USENIX Security Conference."},{"key":"e_1_3_3_22_2","unstructured":"Sonia Burney. 2018. Security and Mutual SSL Identity Authentication for IoT. Akamai White Paper. Retrieved from https:\/\/web.archive.org\/web\/https:\/\/www.akamai.com\/us\/en\/multimedia\/documents\/white-paper\/akamai-security-and-mutual-ssl-iot-white-paper.pdf."},{"key":"e_1_3_3_23_2","unstructured":"Center for Cybersecurity Policy and Law. 2019. Enterprise Data Center Transparency and Security Initiative. Retrieved from https:\/\/www.centerforcybersecuritypolicy.org\/initiatives\/enterprise-data-center-transparency-and-security-initiative."},{"key":"e_1_3_3_24_2","volume-title":"European Symposium on Security and Privacy (EuroS&P)","author":"Chen Guoxing","year":"2019","unstructured":"Guoxing Chen, Sanchuan Chen, Yuan Xiao, Yinqian Zhang, Zhiqiang Lin, and Ten-Hwang Lai. 2019. SgxPectre: Stealing Intel secrets from SGX enclaves via speculative execution. In European Symposium on Security and Privacy (EuroS&P)."},{"key":"e_1_3_3_25_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2020.107268"},{"key":"e_1_3_3_26_2","volume-title":"Research Conference on Communications, Information, and Internet Policy (TPRC)","author":"Choffnes David","year":"2017","unstructured":"David Choffnes, Phillipa Gill, and Alan Mislove. 2017. An empirical evaluation of deployed DPI middleboxes and their implications for policymakers. In Research Conference on Communications, Information, and Internet Policy (TPRC)."},{"key":"e_1_3_3_27_2","volume-title":"European Symposium on Security and Privacy (EuroS&P)","author":"Chuat Laurent","year":"2020","unstructured":"Laurent Chuat, AbdelRahman Abdou, Ralf Sasse, Christoph Sprenger, David Basin, and Adrian Perrig. 2020. SoK: Delegation and revocation, the missing links in the web\u2019s chain of trust. In European Symposium on Security and Privacy (EuroS&P)."},{"key":"e_1_3_3_28_2","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987455"},{"key":"e_1_3_3_29_2","volume-title":"USENIX Security Conference","author":"Chung Taejoong","year":"2017","unstructured":"Taejoong Chung, Roland van Rijswijk-Deij, Balakrishnan Chandrasekaran, David R. Choffnes, Dave Levin, Bruce M. Maggs, Alan Mislove, and Christo Wilson. 2017. A longitudinal, end-to-end view of the DNSSEC ecosystem. In USENIX Security Conference."},{"key":"e_1_3_3_30_2","unstructured":"Cisco Systems Inc.2019. Cisco Encrypted Traffic Analytics. Retrieved from https:\/\/www.cisco.com\/c\/en\/us\/solutions\/enterprise-networks\/enterprise-network-security\/eta.html."},{"key":"e_1_3_3_31_2","unstructured":"Cisco Systems Inc.2020. ECS Administration Guide StarOS Release 21.18. Retrieved from https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/wireless\/asr_5000\/21-18_6-12\/ECS-Admin\/21-18-ECS-Admin.pdf."},{"key":"e_1_3_3_32_2","volume-title":"IEEE Symposium on Security and Privacy (S&P)","author":"Clark Jeremy","year":"2013","unstructured":"Jeremy Clark and Paul C. van Oorschot. 2013. SSL and HTTPS: Revisiting past challenges and evaluating certificate trust model enhancements. In IEEE Symposium on Security and Privacy (S&P)."},{"key":"e_1_3_3_33_2","doi-asserted-by":"crossref","unstructured":"David Cooper Stefan Santesson Stephen Farrell Sharon Boeyen Russell Housley and William Polk. 2008. Internet X.509 public key infrastructure certificate and certificate revocation list (CRL) profile. RFC 5280 (Standards Track).","DOI":"10.17487\/rfc5280"},{"key":"e_1_3_3_34_2","unstructured":"Court of Justice of the European Union. 2014. The Court of Justice Declares the Data Retention Directive to Be Invalid. Retrieved from https:\/\/curia.europa.eu\/jcms\/upload\/docs\/application\/pdf\/2014-04\/cp140054en.pdf."},{"key":"e_1_3_3_35_2","volume-title":"Network and Distributed System Security Symposium (NDSS)","author":"Carnavalet Xavier de Carn\u00e9 de","year":"2016","unstructured":"Xavier de Carn\u00e9 de Carnavalet and Mohammad Mannan. 2016. Killed by proxy: Analyzing client-end TLS interception software. In Network and Distributed System Security Symposium (NDSS)."},{"key":"e_1_3_3_36_2","article-title":"Privacy and security risks of \u201cNot-a-Virus\u201d bundled adware: The Wajam case","volume":"1905","author":"Carnavalet Xavier de Carn\u00e9 de","year":"2019","unstructured":"Xavier de Carn\u00e9 de Carnavalet and Mohammad Mannan. 2019. Privacy and security risks of \u201cNot-a-Virus\u201d bundled adware: The Wajam case. CoRR abs\/1905.05224 (2019).","journal-title":"CoRR"},{"key":"e_1_3_3_37_2","doi-asserted-by":"crossref","unstructured":"Tim Dierks and Christopher Allen. 1999. The TLS Protocol Version 1.0. RFC 2246 (Standards Track).","DOI":"10.17487\/rfc2246"},{"key":"e_1_3_3_38_2","doi-asserted-by":"crossref","unstructured":"Tim Dierks and Eric Rescorla. 2006. The Transport Layer Security (TLS) Protocol Version 1.1. RFC 4346 (Standards Track).","DOI":"10.17487\/rfc4346"},{"key":"e_1_3_3_39_2","doi-asserted-by":"crossref","unstructured":"Tim Dierks and Eric Rescorla. 2008. The Transport Layer Security (TLS) Protocol Version 1.2. RFC 5246 (Standards Track).","DOI":"10.17487\/rfc5246"},{"key":"e_1_3_3_40_2","doi-asserted-by":"crossref","unstructured":"Viktor Dukhovni and Wes Hardaker. 2015. The DNS-based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance. RFC 7671 (Standards Track).","DOI":"10.17487\/RFC7671"},{"key":"e_1_3_3_41_2","volume-title":"Network and Distributed System Security Symposium (NDSS)","author":"Durumeric Zakir","year":"2017","unstructured":"Zakir Durumeric, Zane Ma, Drew Springall, Richard Barnes, Nick Sullivan, Elie Bursztein, Michael Bailey, J. Alex Halderman, and Vern Paxson. 2017. The security impact of HTTPS interception. In Network and Distributed System Security Symposium (NDSS)."},{"key":"e_1_3_3_42_2","unstructured":"ETSI. 2006. Lawful Interception (LI) \u2013 Interception domain Architecture for IP networks. ETSI TR 102 528 V1.1.1."},{"key":"e_1_3_3_43_2","unstructured":"ETSI. 2019. Middlebox Security Protocol \u2013 Part 3: Enterprise Transport Security. ETSI TS 103 523-3 V1.3.1."},{"key":"e_1_3_3_44_2","unstructured":"ETSI. 2021. Middlebox Security Protocol \u2013 Part 2: Transport layer MSP profile for fine grained access control. ETSI TS 103 523-2 V1.1.1. Retrieved from https:\/\/www.etsi.org\/deliver\/etsi_ts\/103500_103599\/10352302\/01.01.01_60\/ts_10352302v010101p.pdf."},{"key":"e_1_3_3_45_2","doi-asserted-by":"crossref","unstructured":"Chris Evans Chris Palmer and Ryan Sleevi. 2015. Public Key Pinning Extension for HTTP. RFC 7469 (Standards Track).","DOI":"10.17487\/RFC7469"},{"key":"e_1_3_3_46_2","unstructured":"Ex\u00e9g\u00e8tes Amateurs. 2018. Application of the Tele2 Sverige\/Watson Jurisprudence throughout Europe. Open Letter to the European Commission. Retrieved from https:\/\/stopdataretention.eu\/."},{"key":"e_1_3_3_47_2","unstructured":"Stephen Farrell. 2017. tinfoil: TLS Is Not for Obligatory (or Ostensibly Optional) Interception Luckily. Retrieved from https:\/\/github.com\/sftcd\/tinfoil."},{"key":"e_1_3_3_48_2","volume-title":"SIGCOMM Workshop on Hot Topics in Middleboxes and Network Function Virtualization (HotMiddlebox)","author":"Fossati Thomas","year":"2015","unstructured":"Thomas Fossati, Vijay K. Gurbani, and Vladimir Kolesnikov. 2015. Love all, trust few: On trusting intermediaries in HTTP. In SIGCOMM Workshop on Hot Topics in Middleboxes and Network Function Virtualization (HotMiddlebox)."},{"key":"e_1_3_3_49_2","doi-asserted-by":"publisher","DOI":"10.1109\/GLOBECOM38437.2019.9014011"},{"key":"e_1_3_3_50_2","doi-asserted-by":"crossref","unstructured":"Alan O. Freier Philip Karlton and Paul C. Kocher. 2011. The Secure Sockets Layer (SSL) Protocol Version 3.0. RFC 6101 (Historic).","DOI":"10.17487\/rfc6101"},{"key":"e_1_3_3_51_2","unstructured":"Charles E. Gero and Michael R. Stone. 2015. Splicing into an active TLS session without a certificate or private key. US Patent 9 137 218."},{"key":"e_1_3_3_52_2","unstructured":"Daniel K. Gillmor. 2018. TLS Clients Should Reject Static Diffie-Hellman. Internet Draft (Standards Track). Retrieved from https:\/\/tools.ietf.org\/id\/draft-dkg-tls-reject-static-dh-00.html."},{"key":"e_1_3_3_53_2","unstructured":"Dan Goodin. 2015. Google Chrome Will Banish Chinese Certificate Authority for Breach of Trust. Retrieved from https:\/\/arstechnica.com\/security\/2015\/04\/google-chrome-will-banish-chinese-certificate-authority-for-breach-of-trust\/."},{"key":"e_1_3_3_54_2","unstructured":"Dan Goodin. 2017. Nope This Isn\u2019t the HTTPS-validated Stripe Website You Think It Is. Retrieved from https:\/\/arstechnica.com\/information-technology\/2017\/12\/nope-this-isnt-the-https-validated-stripe-website-you-think-it-is\/."},{"key":"e_1_3_3_55_2","unstructured":"Google. 2012. Google Safe Browsing. Retrieved from https:\/\/safebrowsing.google.com\/."},{"key":"e_1_3_3_56_2","unstructured":"M. Green R. Droms R. Housley P. Turner and S. Fenter. 2017. Data Center Use of Static Diffie-Hellman in TLS 1.3. Internet Draft (Standards Track). Retrieved from https:\/\/tools.ietf.org\/html\/draft-green-tls-static-dh-in-tls13-01."},{"key":"e_1_3_3_57_2","unstructured":"Glenn Greenwald and Ewen MacAskill. 2013. NSA Prism Program Taps in to User Data of Apple Google and Others. Retrieved from https:\/\/www.theguardian.com\/world\/2013\/jun\/06\/us-tech-giants-nsa-data."},{"key":"e_1_3_3_58_2","volume-title":"Asia-Pacific Workshop on Networking (APNet)","author":"Han Juhyeng","year":"2017","unstructured":"Juhyeng Han, Seong Min Kim, Jaehyeong Ha, and Dongsu Han. 2017. SGX-Box: Enabling visibility on encrypted traffic using a secure middlebox module. In Asia-Pacific Workshop on Networking (APNet)."},{"key":"e_1_3_3_59_2","volume-title":"USENIX Security Conference","author":"Herwig Stephen","year":"2020","unstructured":"Stephen Herwig, Christina Garman, and Dave Levin. 2020. Achieving keyless CDNs with conclaves. In USENIX Security Conference."},{"key":"e_1_3_3_60_2","unstructured":"Jacob Hoffman-Andrews. 2019. ETS Isn\u2019t TLS and You Shouldn\u2019t Use It. Retrieved from https:\/\/www.eff.org\/deeplinks\/2019\/02\/ets-isnt-tls-and-you-shouldnt-use-it."},{"key":"e_1_3_3_61_2","unstructured":"Johann Hofmann. 2019. Intent to Ship: Move Extended Validation Information out of the URL bar. Google Groups firefox-dev forum. Retrieved from https:\/\/groups.google.com\/forum\/m\/?fromgroups&hl=en#!topic\/firefox-dev\/6wAg_PpnlY4."},{"key":"e_1_3_3_62_2","unstructured":"Russ Housley and Ralph Droms. 2018. TLS 1.3 Option for Negotiation of Visibility in the Datacenter. Internet Draft (Standards Track). Retrieved from https:\/\/tools.ietf.org\/html\/draft-rhrd-tls-tls13-visibility-01."},{"key":"e_1_3_3_63_2","unstructured":"Internet Society. 2017. Perspectives on Internet Content Blocking: An Overview. Retrieved from https:\/\/www.internetsociety.org\/wp-content\/uploads\/2017\/03\/ContentBlockingOverview.pdf."},{"key":"e_1_3_3_64_2","volume-title":"BlackHat Europe Conference","author":"Jarmoc Jeff","year":"2012","unstructured":"Jeff Jarmoc. 2012. SSL interception proxies and transitive trust. In BlackHat Europe Conference."},{"key":"e_1_3_3_65_2","volume-title":"Network and Distributed System Security Symposium","author":"Khattak Sheharbano","year":"2016","unstructured":"Sheharbano Khattak, David Fifield, Sadia Afroz, Mobin Javed, Srikanth Sundaresan, Damon McCoy, Vern Paxson, and Steven J. Murdoch. 2016. Do you see what I see? Differential treatment of anonymous users. In Network and Distributed System Security Symposium."},{"key":"e_1_3_3_66_2","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278568"},{"key":"e_1_3_3_67_2","doi-asserted-by":"crossref","unstructured":"Hugo Krawczyk and Pasi Eronen. 2010. HMAC-based Extract-and-Expand Key Derivation Function (HKDF). RFC 5869 (Info. Track).","DOI":"10.17487\/rfc5869"},{"key":"e_1_3_3_68_2","volume-title":"USENIX Symposium on Networked Systems Design and Implementation (NSDI)","author":"Lan Chang","year":"2016","unstructured":"Chang Lan, Justine Sherry, Raluca Ada Popa, Sylvia Ratnasamy, and Zhi Liu. 2016. Embark: Securely outsourcing middleboxes to the cloud. In USENIX Symposium on Networked Systems Design and Implementation (NSDI)."},{"key":"e_1_3_3_69_2","unstructured":"Eric Lawrence. 2019. Spying on HTTPS. Retrieved from https:\/\/textslashplain.com\/2019\/08\/11\/spying-on-https\/."},{"key":"e_1_3_3_70_2","volume-title":"Network and Distributed System Security Symposium (NDSS)","author":"Lee Hyunwoo","year":"2019","unstructured":"Hyunwoo Lee, Zach Smith, Junghwan Lim, Gyeongjae Choi, Selin Chun, Taejoong Chung, and Ted Taekyoung Kwon. 2019. maTLS: How to make TLS middlebox-aware? In Network and Distributed System Security Symposium (NDSS)."},{"key":"e_1_3_3_71_2","unstructured":"Peter Lepeska. 2014. Trusted Proxy and the Cost of Bits. IETF HTTP (httpbis) WG Meeting Slides. Retrieved from https:\/\/datatracker.ietf.org\/doc\/slides-90-httpbis-6\/."},{"key":"e_1_3_3_72_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2005.01.006"},{"key":"e_1_3_3_73_2","unstructured":"John Leyden. 2012. Revoking Trust in Two TurkTrust Certificates. Retrieved from https:\/\/www.theregister.com\/2012\/02\/14\/trustwave_analysis\/."},{"key":"e_1_3_3_74_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2953715"},{"key":"e_1_3_3_75_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.12"},{"key":"e_1_3_3_76_2","unstructured":"David A. McGrew Dan Wing Yoav Nir and Philip Gladstone. 2012. TLS Proxy Server Extension. Internet Draft (Informational). Retrieved from https:\/\/tools.ietf.org\/html\/draft-mcgrew-tls-proxy-server-01."},{"key":"e_1_3_3_77_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39799-8_48"},{"key":"e_1_3_3_78_2","unstructured":"Daniel Migault. 2018. LURK Protocol version 1. Internet Draft (Standards Track)."},{"key":"e_1_3_3_79_2","unstructured":"Daniel Migault. 2021. LURK Extension version 1 for (D)TLS 1.2 Authentication. Internet Draft (Standards Track)."},{"key":"e_1_3_3_80_2","unstructured":"Daniel Migault. 2022. LURK Extension version 1 for (D)TLS 1.3 Authentication. Internet Draft (Standards Track)."},{"key":"e_1_3_3_81_2","doi-asserted-by":"crossref","unstructured":"Kathleen Moriarty and Al Morton. 2018. Effects of Pervasive Encryption on Operators. RFC 8404 (Informational Track).","DOI":"10.17487\/RFC8404"},{"key":"e_1_3_3_82_2","unstructured":"Mozilla. 2013. Revoking Trust in One ANSSI Certificate. Retrieved from https:\/\/blog.mozilla.org\/security\/2013\/12\/09\/revoking-trust-in-one-anssi-certificate\/."},{"key":"e_1_3_3_83_2","unstructured":"Mozilla. 2013. Revoking Trust in Two TurkTrust Certificates. Retrieved from https:\/\/blog.mozilla.org\/security\/2013\/01\/03\/revoking-trust-in-two-turktrust-certficates\/."},{"key":"e_1_3_3_84_2","unstructured":"Mozilla. 2019. NSS Key Log Format. Retrieved from https:\/\/developer.mozilla.org\/en-US\/docs\/Mozilla\/Projects\/NSS\/Key_Log_Format."},{"key":"e_1_3_3_85_2","volume-title":"Symposium on a World of Wireless, Mobile and Multimedia Networks (WoWMoM)","author":"Nam Hyunwoo","year":"2014","unstructured":"Hyunwoo Nam, Kyung-Hwa Kim, Bong-Ho Kim, Doru Calin, and Henning Schulzrinne. 2014. Towards dynamic QoS-aware over-the-top video streaming. In Symposium on a World of Wireless, Mobile and Multimedia Networks (WoWMoM)."},{"key":"e_1_3_3_86_2","doi-asserted-by":"publisher","DOI":"10.1145\/2674005.2674991"},{"key":"e_1_3_3_87_2","doi-asserted-by":"publisher","DOI":"10.1145\/3143361.3143383"},{"key":"e_1_3_3_88_2","doi-asserted-by":"publisher","DOI":"10.1145\/2785956.2787482"},{"key":"e_1_3_3_89_2","volume-title":"European Symposium on Research in Computer Security (ESORICS)","author":"Ning Jianting","year":"2020","unstructured":"Jianting Ning, Xinyi Huang, Geong Sen Poh, Shengmin Xu, Jia-Ch\u2019ng Loh, Jian Weng, and Robert H. Deng. 2020. Pine: Enabling privacy-preserving deep packet inspection on TLS with rule-hiding and fast connection establishment. In European Symposium on Research in Computer Security (ESORICS)."},{"key":"e_1_3_3_90_2","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354204"},{"key":"e_1_3_3_91_2","doi-asserted-by":"crossref","unstructured":"Yoav Nir Simon Josefsson and Manuel Pegourie-Gonnard. 2018. Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier. RFC 8422 (Standards Track).","DOI":"10.17487\/RFC8422"},{"key":"e_1_3_3_92_2","unstructured":"Nubeva. 2019. Decrypted Visibility in a TLS 1.3 World \u2013 Symmetric Key Intercept for Secure SSL\/TLS Decryption in the Cloud. White Paper. Retrieved from https:\/\/info.nubeva.com\/hubfs\/Downloadables\/Nubeva%20Decrypted%20Visibility%20-%20white%20paper%20-%20v4.pdf."},{"key":"e_1_3_3_93_2","unstructured":"Devon O\u2019Brien. 2019. Upcoming Change to Chrome\u2019s Identity Indicators. Google Groups chromium.org Security-dev\u2019s list. Retrieved from https:\/\/groups.google.com\/a\/chromium.org\/forum\/#!topic\/security-dev\/h1bTcoTpfeI."},{"key":"e_1_3_3_94_2","unstructured":"Official Journal of the European Union. 2016. General data protection regulation. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46. 59 (2016) 1\u201388."},{"key":"e_1_3_3_95_2","unstructured":"OpenSSL. 2005. Changelog. Retrieved from https:\/\/www.openssl.org\/news\/changelog.html."},{"key":"e_1_3_3_96_2","unstructured":"Opera. 2015. Choose High or Extreme Savings in New Opera Mini for Android. Retrieved from https:\/\/blogs.opera.com\/mobile\/2015\/09\/choose-high-or-extreme-savings-new-opera-mini-android\/."},{"key":"e_1_3_3_97_2","unstructured":"Tavis Ormandy. 2016. Kaspersky: SSL interception differentiates certificates with a 32bit hash. Google Proj. Zero 978 (Nov. 1 2016). Retrieved from https:\/\/bugs.chromium.org\/p\/project-zero\/issues\/detail?id=978."},{"key":"e_1_3_3_98_2","volume-title":"Network and Distributed System Security Symposium (NDSS)","author":"Panchenko Andriy","year":"2016","unstructured":"Andriy Panchenko, Fabian Lanze, Jan Pennekamp, Thomas Engel, Andreas Zinnen, Martin Henze, and Klaus Wehrle. 2016. Website fingerprinting at Internet scale. In Network and Distributed System Security Symposium (NDSS)."},{"key":"e_1_3_3_99_2","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029821"},{"key":"e_1_3_3_100_2","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355577"},{"key":"e_1_3_3_101_2","volume-title":"SSL and TLS: Designing and Building Secure Systems","author":"Rescorla Eric","year":"2001","unstructured":"Eric Rescorla. 2001. SSL and TLS: Designing and Building Secure Systems. Addison-Wesley."},{"key":"e_1_3_3_102_2","doi-asserted-by":"crossref","unstructured":"Eric Rescorla. 2010. Keying Material Exporters for Transport Layer Security (TLS). RFC 5705 (Standards Track).","DOI":"10.17487\/rfc5705"},{"key":"e_1_3_3_103_2","doi-asserted-by":"crossref","unstructured":"Eric Rescorla. 2018. The Transport Layer Security (TLS) Protocol Version 1.3. RFC 8446 (Standards Track).","DOI":"10.17487\/RFC8446"},{"key":"e_1_3_3_104_2","unstructured":"Eric Rescorla Kazuho Oku and Nick Sullivan. 2022. TLS Encrypted Client Hello. Internet Draft (Standards Track). Retrieved from https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-tls-esni."},{"key":"e_1_3_3_105_2","doi-asserted-by":"crossref","unstructured":"Eric Rescorla Marsh Ray Steve Dispensa and Nasko Oskov. 2010. Transport Layer Security (TLS) Renegotiation Indication Extension. RFC 5746 (Standards Track).","DOI":"10.17487\/rfc5746"},{"key":"e_1_3_3_106_2","volume-title":"Bulletproof SSL and TLS: Understanding and Deploying SSL\/TLS and PKI to Secure Servers and Web Applications","author":"Risti\u0107 Ivan","year":"2014","unstructured":"Ivan Risti\u0107. 2014. Bulletproof SSL and TLS: Understanding and Deploying SSL\/TLS and PKI to Secure Servers and Web Applications. Feisty Duck."},{"key":"e_1_3_3_107_2","unstructured":"Charles H. Romine. 2018. Public Comments on the Second Draft of NIST Special Publication 800-52 Revision 2 Guidelines for the Selection Configuration and Use of Transport Layer Security (TLS) Implementations. Retrieved from https:\/\/csrc.nist.gov\/CSRC\/media\/Publications\/sp\/800-52\/rev-2\/draft\/documents\/sp800-52r2-draft2-comments-received.pdf."},{"key":"e_1_3_3_108_2","unstructured":"Emily Schechter. 2018. A milestone for Chrome Security: Marking HTTP as \u201cnot secure.\u201d Retrieved from https:\/\/blog.google\/products\/chrome\/milestone-chrome-security-marking-http-not-secure\/."},{"key":"e_1_3_3_109_2","doi-asserted-by":"publisher","DOI":"10.1145\/2785956.2787502"},{"key":"e_1_3_3_110_2","unstructured":"Brian Smith. 2012. Twitter exchange between Brian Smith and Nick Sullivan (Cloudflare). Retrieved from https:\/\/web.archive.org\/web\/https:\/\/twitter.com\/BRIAN_____\/status\/513089773536149504."},{"key":"e_1_3_3_111_2","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.385"},{"key":"e_1_3_3_112_2","unstructured":"Nick Sullivan. 2014. Keyless SSL: The Nitty Gritty Technical Details. Retrieved from https:\/\/blog.cloudflare.com\/keyless-ssl-the-nitty-gritty-technical-details\/."},{"key":"e_1_3_3_113_2","unstructured":"Nick Sullivan and Watson Ladd. 2019. Delegated Credentials for TLS. Retrieved from https:\/\/blog.cloudflare.com\/keyless-delegation\/."},{"key":"e_1_3_3_114_2","unstructured":"Willy Tarreau. 2010. The PROXY Protocol. HAProxy Load Balancer Feature. Retrieved from https:\/\/www.haproxy.org\/download\/1.8\/doc\/proxy-protocol.txt."},{"key":"e_1_3_3_115_2","unstructured":"Roelof Du Toit. 2017. Responsibly Intercepting TLS and the Impact of TLS 1.3. Symantec White Paper. Retrieved from https:\/\/docs.broadcom.com\/doc\/responsibly-intercepting-tls-and-the-impact-of-tls-1.3.en."},{"key":"e_1_3_3_116_2","doi-asserted-by":"crossref","unstructured":"Steven Tuecke Von Welch Doug Engert Laura Pearlman and Mary Thompson. 2004. Internet X.509 Public Key Infrastructure (PKI). RFC 3820 (Standards Track).","DOI":"10.17487\/rfc3820"},{"key":"e_1_3_3_117_2","unstructured":"Daiki Ueno. 2020. Understanding the DTLS All-zero ClientHello.random Vulnerability. Retrieved from https:\/\/www.redhat.com\/en\/blog\/understanding-dtls-all-zero-clienthellorandom-vulnerability."},{"key":"e_1_3_3_118_2","volume-title":"CanSecWest Conference","author":"Valadon Guillaume","year":"2022","unstructured":"Guillaume Valadon. 2022. When eBPF meets TLS. In CanSecWest Conference."},{"key":"e_1_3_3_119_2","volume-title":"SIGCOMM Workshop on Hot Topics in Middleboxes and Network Function Virtualization","author":"Vallina-Rodriguez Narseo","year":"2015","unstructured":"Narseo Vallina-Rodriguez, Srikanth Sundaresan, Christian Kreibich, and Vern Paxson. 2015. Header enrichment or ISP enrichment: Emerging privacy threats in mobile networks. In SIGCOMM Workshop on Hot Topics in Middleboxes and Network Function Virtualization."},{"key":"e_1_3_3_120_2","volume-title":"IEEE Symposium on Security and Privacy (S&P)","author":"Bulck Jo Van","year":"2020","unstructured":"Jo Van Bulck, Daniel Moghimi, Michael Schwarz, Moritz Lipp, Marina Minkin, Daniel Genkin, Yarom Yuval, Berk Sunar, Daniel Gruss, and Frank Piessens. 2020. LVI: Hijacking transient execution through microarchitectural load value injection. In IEEE Symposium on Security and Privacy (S&P)."},{"key":"e_1_3_3_121_2","volume-title":"Network and Distributed System Security Symposium (NDSS)","author":"Ede Thijs van","year":"2020","unstructured":"Thijs van Ede, Riccardo Bortolameotti, Andrea Continella, Jingjing Ren, Daniel J. Dubois, Martina Lindorfer, David R. Choffnes, Maarten van Steen, and Andreas Peter. 2020. FlowPrint: Semi-supervised mobile-app fingerprinting on encrypted network traffic. In Network and Distributed System Security Symposium (NDSS)."},{"key":"e_1_3_3_122_2","unstructured":"Stephan van Schaik Andrew Kwong Daniel Genkin and Yuval Yarom. 2020. SGAxe: How SGX Fails in Practice. Retrieved from https:\/\/sgaxe.com\/."},{"key":"e_1_3_3_123_2","unstructured":"Steven J. Vaughan-Nichols. 2013. Google the NSA and the Need for Locking Down Datacenter Traffic. Retrieved from https:\/\/www.zdnet.com\/article\/google-the-nsa-and-the-need-for-locking-down-datacenter-traffic\/."},{"key":"e_1_3_3_124_2","doi-asserted-by":"publisher","DOI":"10.1002\/nem.1901"},{"key":"e_1_3_3_125_2","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196528"},{"key":"e_1_3_3_126_2","volume-title":"USENIX Security Conference","author":"Wang Tao","year":"2017","unstructured":"Tao Wang and Ian Goldberg. 2017. Walkie-talkie: An efficient defense against passive website fingerprinting attacks. In USENIX Security Conference."},{"key":"e_1_3_3_127_2","unstructured":"Alec Waters. 2019. Eyesight to the Blind - SSL Decryption for Network Monitoring. Retrieved from https:\/\/resources.infosecinstitute.com\/ssl-decryption\/."},{"key":"e_1_3_3_128_2","volume-title":"Passive and Active Measurement","author":"Weaver Nicholas","year":"2014","unstructured":"Nicholas Weaver, Christian Kreibich, Martin Dam, and Vern Paxson. 2014. Here be web proxies. In Passive and Active Measurement."},{"key":"e_1_3_3_129_2","volume-title":"Symposium on Cloud Computing (SoCC)","author":"Wei Changzheng","year":"2017","unstructured":"Changzheng Wei, Jian Li, Weigang Li, Ping Yu, and Haibing Guan. 2017. STYX: A trusted and accelerated hierarchical SSL key management and distribution system for cloud based CDN application. In Symposium on Cloud Computing (SoCC)."},{"key":"e_1_3_3_130_2","volume-title":"3rd Annual NIST PKI R&D Workshop","author":"Welch Von","year":"2004","unstructured":"Von Welch, Ian Foster, Carl Kesselman, Olle Mulmo, Laura Pearlman, Steven Tuecke, Jarek Gawor, Sam Meder, and Frank Siebenlist. 2004. X.509 proxy certificates for dynamic delegation. In 3rd Annual NIST PKI R&D Workshop."},{"key":"e_1_3_3_131_2","doi-asserted-by":"publisher","DOI":"10.1145\/3081333.3081342"},{"key":"e_1_3_3_132_2","volume-title":"SIGCOMM Workshop on Hot Topics in Middleboxes and Network Function Virtualization (HotMiddlebox)","author":"Zhou Zhenyu","year":"2015","unstructured":"Zhenyu Zhou and Theophilus Benson. 2015. Towards a safe playground for HTTPS and middle boxes with QoS2. In SIGCOMM Workshop on Hot Topics in Middleboxes and Network Function Virtualization (HotMiddlebox)."}],"container-title":["ACM Computing Surveys"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3580522","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3580522","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T12:46:35Z","timestamp":1750164395000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3580522"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,13]]},"references-count":131,"journal-issue":{"issue":"13s","published-print":{"date-parts":[[2023,12,31]]}},"alternative-id":["10.1145\/3580522"],"URL":"https:\/\/doi.org\/10.1145\/3580522","relation":{},"ISSN":["0360-0300","1557-7341"],"issn-type":[{"value":"0360-0300","type":"print"},{"value":"1557-7341","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,7,13]]},"assertion":[{"value":"2020-10-30","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2022-12-12","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-07-13","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}