id sid tid token lemma pos www-eff-org-1923 1 1 Is be VBZ www-eff-org-1923 1 2 the the DT www-eff-org-1923 1 3 SSLiverse SSLiverse NNP www-eff-org-1923 1 4 a a DT www-eff-org-1923 1 5 Safe Safe NNP www-eff-org-1923 1 6 Place place NN www-eff-org-1923 1 7 ? ? . www-eff-org-1923 2 1 Peter Peter NNP www-eff-org-1923 2 2 Eckersley Eckersley NNP www-eff-org-1923 2 3 Jesse Jesse NNP www-eff-org-1923 2 4 Burns Burns NNP www-eff-org-1923 2 5 @ @ NFP www-eff-org-1923 2 6 EFF EFF NNP www-eff-org-1923 2 7 @ @ NFP www-eff-org-1923 2 8 iSec iSec NNP www-eff-org-1923 2 9 Partners Partners NNPS www-eff-org-1923 2 10 Special special JJ www-eff-org-1923 2 11 thanks thank NNS www-eff-org-1923 2 12 to to IN www-eff-org-1923 2 13 Chris Chris NNP www-eff-org-1923 2 14 Palmer Palmer NNP www-eff-org-1923 2 15 @ @ NFP www-eff-org-1923 2 16 EFF EFF NNP www-eff-org-1923 2 17 for for IN www-eff-org-1923 2 18 help help NN www-eff-org-1923 2 19 with with IN www-eff-org-1923 2 20 data datum NNS www-eff-org-1923 2 21 wrangling wrangling NN www-eff-org-1923 2 22 + + CC www-eff-org-1923 2 23 publication publication NN www-eff-org-1923 2 24       _SP www-eff-org-1923 2 25 So so RB www-eff-org-1923 2 26 , , , www-eff-org-1923 2 27 HTTPS HTTPS NNP www-eff-org-1923 2 28 will will MD www-eff-org-1923 2 29 save save VB www-eff-org-1923 2 30 the the DT www-eff-org-1923 2 31 web web NN www-eff-org-1923 2 32 but but CC www-eff-org-1923 2 33 ... ... NFP www-eff-org-1923 2 34 encryption encryption NN www-eff-org-1923 2 35 security security NN www-eff-org-1923 2 36 ≤ ≤ NNP www-eff-org-1923 2 37 ability ability NN www-eff-org-1923 2 38 to to TO www-eff-org-1923 2 39 identify identify VB www-eff-org-1923 2 40 the the DT www-eff-org-1923 2 41 other other JJ www-eff-org-1923 2 42 party party NN www-eff-org-1923 2 43       _SP www-eff-org-1923 2 44 Certificate Certificate NNP www-eff-org-1923 2 45 Authorities Authorities NNPS www-eff-org-1923 2 46 ( ( -LRB- www-eff-org-1923 2 47 CAs CAs NNP www-eff-org-1923 2 48 ) ) -RRB- www-eff-org-1923 2 49 say say VBP www-eff-org-1923 2 50 ” " '' www-eff-org-1923 2 51 this this DT www-eff-org-1923 2 52 key key NN www-eff-org-1923 2 53 belongs belong VBZ www-eff-org-1923 2 54 to to IN www-eff-org-1923 2 55 mail.google.com mail.google.com NNP www-eff-org-1923 2 56 ” " '' www-eff-org-1923 2 57 ( ( -LRB- www-eff-org-1923 2 58 browsers browser NNS www-eff-org-1923 2 59 trust trust VBP www-eff-org-1923 2 60 the the DT www-eff-org-1923 2 61 CAs ca NNS www-eff-org-1923 2 62 ) ) -RRB- www-eff-org-1923 2 63 HTTPS HTTPS NNP www-eff-org-1923 2 64 uses use VBZ www-eff-org-1923 2 65 certificates certificate NNS www-eff-org-1923 2 66       _SP www-eff-org-1923 2 67 2009 2009 CD www-eff-org-1923 2 68 : : : www-eff-org-1923 2 69 3 3 CD www-eff-org-1923 2 70 vulnerabilities vulnerability NNS www-eff-org-1923 2 71 due due JJ www-eff-org-1923 2 72 to to IN www-eff-org-1923 2 73 CA CA NNP www-eff-org-1923 2 74 mistakes mistake NNS www-eff-org-1923 2 75 2010 2010 CD www-eff-org-1923 2 76 : : : www-eff-org-1923 2 77 evidence evidence NN www-eff-org-1923 2 78 of of IN www-eff-org-1923 2 79 governments government NNS www-eff-org-1923 2 80 compelling compel VBG www-eff-org-1923 2 81 CAs CAs NNP www-eff-org-1923 2 82 Generally generally RB www-eff-org-1923 2 83 : : : www-eff-org-1923 2 84 too too RB www-eff-org-1923 2 85 many many JJ www-eff-org-1923 2 86 trusted trusted JJ www-eff-org-1923 2 87 parties party NNS www-eff-org-1923 2 88 ! ! . www-eff-org-1923 3 1 We -PRON- PRP www-eff-org-1923 3 2 are be VBP www-eff-org-1923 3 3 afraid afraid JJ www-eff-org-1923 3 4 of of IN www-eff-org-1923 3 5 CAs CAs NNP www-eff-org-1923 3 6 because because IN www-eff-org-1923 3 7 : : : www-eff-org-1923 3 8       _SP www-eff-org-1923 3 9 Also also RB www-eff-org-1923 3 10 afraid afraid JJ www-eff-org-1923 3 11 of of IN www-eff-org-1923 3 12 X.509 X.509 NNP www-eff-org-1923 3 13 Designed design VBN www-eff-org-1923 3 14 in in IN www-eff-org-1923 3 15 1980s 1980s CD www-eff-org-1923 3 16 By by IN www-eff-org-1923 3 17 the the DT www-eff-org-1923 3 18 ITU ITU NNP www-eff-org-1923 3 19 ( ( -LRB- www-eff-org-1923 3 20 ! ! . www-eff-org-1923 4 1 ) ) -RRB- www-eff-org-1923 4 2 , , , www-eff-org-1923 4 3 before before IN www-eff-org-1923 4 4 HTTP HTTP NNP www-eff-org-1923 4 5 ( ( -LRB- www-eff-org-1923 4 6 ! ! . www-eff-org-1923 4 7 ! ! . www-eff-org-1923 4 8 ! ! . www-eff-org-1923 4 9 ) ) -RRB- www-eff-org-1923 5 1 + + CC www-eff-org-1923 5 2 extremely extremely RB www-eff-org-1923 5 3 flexible flexible JJ www-eff-org-1923 5 4 & & CC www-eff-org-1923 5 5 general general JJ www-eff-org-1923 5 6 - - , www-eff-org-1923 5 7 extremely extremely RB www-eff-org-1923 5 8 flexible flexible JJ www-eff-org-1923 5 9 & & CC www-eff-org-1923 5 10 general general JJ www-eff-org-1923 5 11 - - : www-eff-org-1923 5 12 extremely extremely RB www-eff-org-1923 5 13 ugly ugly JJ www-eff-org-1923 5 14 - - HYPH www-eff-org-1923 5 15 history history NN www-eff-org-1923 5 16 of of IN www-eff-org-1923 5 17 implementation implementation NN www-eff-org-1923 5 18 vulnerabilities vulnerability NNS www-eff-org-1923 5 19       _SP www-eff-org-1923 5 20 X.509 X.509 NNP www-eff-org-1923 5 21 : : : www-eff-org-1923 5 22 Security security NN www-eff-org-1923 5 23 via via IN www-eff-org-1923 5 24 digital digital JJ www-eff-org-1923 5 25 paperwork paperwork NN www-eff-org-1923 5 26 X.509 X.509 NNP www-eff-org-1923 5 27 certs cert NNS www-eff-org-1923 5 28 can can MD www-eff-org-1923 5 29 ( ( -LRB- www-eff-org-1923 5 30 and and CC www-eff-org-1923 5 31 do do VB www-eff-org-1923 5 32 ) ) -RRB- www-eff-org-1923 5 33 contain contain VB www-eff-org-1923 5 34 just just RB www-eff-org-1923 5 35 about about IN www-eff-org-1923 5 36 anything anything NN www-eff-org-1923 5 37       _SP www-eff-org-1923 5 38 What what WP www-eff-org-1923 5 39 to to TO www-eff-org-1923 5 40 do do VB www-eff-org-1923 5 41 about about IN www-eff-org-1923 5 42 it -PRON- PRP www-eff-org-1923 5 43 ? ? . www-eff-org-1923 6 1 1 1 LS www-eff-org-1923 6 2 . . . www-eff-org-1923 7 1 Write write VB www-eff-org-1923 7 2 alternative alternative JJ www-eff-org-1923 7 3 browser browser NN www-eff-org-1923 7 4 code code NN www-eff-org-1923 7 5 ? ? . www-eff-org-1923 8 1 2 2 LS www-eff-org-1923 8 2 . . . www-eff-org-1923 9 1 Study study NN www-eff-org-1923 9 2 CA CA NNP www-eff-org-1923 9 3 behaviour behaviour NN www-eff-org-1923 9 4 and and CC www-eff-org-1923 9 5 detect detect VB www-eff-org-1923 9 6 problems problem NNS www-eff-org-1923 9 7 1 1 CD www-eff-org-1923 9 8 is be VBZ www-eff-org-1923 9 9 hard hard JJ www-eff-org-1923 9 10 → → SYM www-eff-org-1923 9 11 let let VB www-eff-org-1923 9 12 's -PRON- PRP www-eff-org-1923 9 13 do do VB www-eff-org-1923 9 14 2 2 CD www-eff-org-1923 9 15 first first JJ www-eff-org-1923 9 16       _SP www-eff-org-1923 9 17 Scanned scan VBN www-eff-org-1923 9 18 all all DT www-eff-org-1923 9 19 allocated allocate VBN www-eff-org-1923 9 20 IPv4 IPv4 NNP www-eff-org-1923 9 21 space space NN www-eff-org-1923 9 22 ( ( -LRB- www-eff-org-1923 9 23 port port NN www-eff-org-1923 9 24 443 443 CD www-eff-org-1923 9 25 ) ) -RRB- www-eff-org-1923 9 26 Built build VBD www-eff-org-1923 9 27 a a DT www-eff-org-1923 9 28 system system NN www-eff-org-1923 9 29 for for IN www-eff-org-1923 9 30 analysing analyse VBG www-eff-org-1923 9 31 the the DT www-eff-org-1923 9 32 data datum NNS www-eff-org-1923 9 33 Initial initial JJ www-eff-org-1923 9 34 results result NNS www-eff-org-1923 9 35 presented present VBN www-eff-org-1923 9 36 at at IN www-eff-org-1923 9 37 DEFCON defcon NN www-eff-org-1923 9 38 2010 2010 CD www-eff-org-1923 9 39 EFF EFF NNP www-eff-org-1923 9 40 SSL SSL NNP www-eff-org-1923 9 41 Observatory observatory NN www-eff-org-1923 9 42       _SP www-eff-org-1923 9 43 This this DT www-eff-org-1923 9 44 talk talk NN www-eff-org-1923 9 45 : : : www-eff-org-1923 9 46 Brief brief JJ www-eff-org-1923 9 47 overview overview NN www-eff-org-1923 9 48 of of IN www-eff-org-1923 9 49 what what WP www-eff-org-1923 9 50 we -PRON- PRP www-eff-org-1923 9 51 reported report VBD www-eff-org-1923 9 52 at at IN www-eff-org-1923 9 53 DEFCON defcon NN www-eff-org-1923 9 54 New new JJ www-eff-org-1923 9 55 results result NNS www-eff-org-1923 9 56 from from IN www-eff-org-1923 9 57 a a DT www-eff-org-1923 9 58 re re JJ www-eff-org-1923 9 59 - - NN www-eff-org-1923 9 60 scan scan JJ www-eff-org-1923 9 61 A a DT www-eff-org-1923 9 62 tutorial tutorial NN www-eff-org-1923 9 63 on on IN www-eff-org-1923 9 64 using use VBG www-eff-org-1923 9 65 our -PRON- PRP$ www-eff-org-1923 9 66 datasets dataset NNS www-eff-org-1923 9 67 Design design NN www-eff-org-1923 9 68 for for IN www-eff-org-1923 9 69 a a DT www-eff-org-1923 9 70 decentralised decentralised JJ www-eff-org-1923 9 71 Observatory observatory NN www-eff-org-1923 9 72       _SP www-eff-org-1923 9 73 16.2 16.2 CD www-eff-org-1923 9 74 M M NNP www-eff-org-1923 9 75 IPs IPs NNP www-eff-org-1923 9 76 were be VBD www-eff-org-1923 9 77 listening listen VBG www-eff-org-1923 9 78 on on IN www-eff-org-1923 9 79 port port NN www-eff-org-1923 9 80 443 443 CD www-eff-org-1923 9 81 11.3 11.3 CD www-eff-org-1923 9 82 M M NNP www-eff-org-1923 9 83 started start VBD www-eff-org-1923 9 84 an an DT www-eff-org-1923 9 85 SSL SSL NNP www-eff-org-1923 9 86 handshake handshake NN www-eff-org-1923 9 87 4.3+M 4.3+m CD www-eff-org-1923 9 88 used use VBD www-eff-org-1923 9 89 valid valid JJ www-eff-org-1923 9 90 cert cert NN www-eff-org-1923 9 91 chains chain NNS www-eff-org-1923 9 92 1.5+M 1.5+m VBP www-eff-org-1923 9 93 distinct distinct JJ www-eff-org-1923 9 94 valid valid JJ www-eff-org-1923 9 95 leaves leave NNS www-eff-org-1923 9 96 Size size NN www-eff-org-1923 9 97 of of IN www-eff-org-1923 9 98 the the DT www-eff-org-1923 9 99 SSLiverse ssliverse JJ www-eff-org-1923 9 100       _SP www-eff-org-1923 9 101 Lots lot NNS www-eff-org-1923 9 102 of of IN www-eff-org-1923 9 103 CAs ca NNS www-eff-org-1923 9 104 ! ! . www-eff-org-1923 10 1 1,482 1,482 CD www-eff-org-1923 10 2 CAs ca NNS www-eff-org-1923 10 3 trustable trustable NN www-eff-org-1923 10 4 by by IN www-eff-org-1923 10 5 Microsoft Microsoft NNP www-eff-org-1923 10 6 or or CC www-eff-org-1923 10 7 Mozilla Mozilla NNP www-eff-org-1923 10 8 1,167 1,167 CD www-eff-org-1923 10 9 disinct disinct JJ www-eff-org-1923 10 10 Issuer Issuer NNP www-eff-org-1923 10 11 strings string VBZ www-eff-org-1923 10 12 651 651 CD www-eff-org-1923 10 13 organisations organisation NNS www-eff-org-1923 10 14             _SP www-eff-org-1923 10 15 Noteworthy noteworthy JJ www-eff-org-1923 10 16 subordinate subordinate JJ www-eff-org-1923 10 17 CAs CAs NNP www-eff-org-1923 10 18 U.S. U.S. NNP www-eff-org-1923 10 19 Department Department NNP www-eff-org-1923 10 20 of of IN www-eff-org-1923 10 21 Homeland Homeland NNP www-eff-org-1923 10 22 Security Security NNP www-eff-org-1923 10 23 U.S. U.S. NNP www-eff-org-1923 10 24 Defence Defence NNP www-eff-org-1923 10 25 Contractors Contractors NNP www-eff-org-1923 10 26 CNNIC CNNIC NNP www-eff-org-1923 10 27 , , , www-eff-org-1923 10 28 2007 2007 CD www-eff-org-1923 10 29 ( ( -LRB- www-eff-org-1923 10 30 why why WRB www-eff-org-1923 10 31 debate debate VB www-eff-org-1923 10 32 their -PRON- PRP$ www-eff-org-1923 10 33 root root NN www-eff-org-1923 10 34 CA CA NNP www-eff-org-1923 10 35 ? ? . www-eff-org-1923 10 36 ) ) -RRB- www-eff-org-1923 11 1 Etisalat Etisalat NNP www-eff-org-1923 11 2 Gemini Gemini NNP www-eff-org-1923 11 3 Observatory Observatory NNP www-eff-org-1923 11 4       _SP www-eff-org-1923 11 5 Exposure exposure NN www-eff-org-1923 11 6 to to IN www-eff-org-1923 11 7 many many JJ www-eff-org-1923 11 8 jurisdictions jurisdiction NNS www-eff-org-1923 11 9 CAs ca NNS www-eff-org-1923 11 10 are be VBP www-eff-org-1923 11 11 located locate VBN www-eff-org-1923 11 12 in in IN www-eff-org-1923 11 13 these these DT www-eff-org-1923 11 14 ~52 ~52 NFP www-eff-org-1923 11 15 countries country NNS www-eff-org-1923 11 16 : : : www-eff-org-1923 11 17 [ [ -LRB- www-eff-org-1923 11 18 ' ' `` www-eff-org-1923 11 19 AE ae RB www-eff-org-1923 11 20 ' ' '' www-eff-org-1923 11 21 , , , www-eff-org-1923 11 22 ' ' '' www-eff-org-1923 11 23 AT at IN www-eff-org-1923 11 24 ' ' '' www-eff-org-1923 11 25 , , , www-eff-org-1923 11 26 ' ' `` www-eff-org-1923 11 27 AU AU NNP www-eff-org-1923 11 28 ' ' '' www-eff-org-1923 11 29 , , , www-eff-org-1923 11 30 ' ' '' www-eff-org-1923 11 31 BE be VB www-eff-org-1923 11 32 ' ' '' www-eff-org-1923 11 33 , , , www-eff-org-1923 11 34 ' ' '' www-eff-org-1923 11 35 BG BG NNP www-eff-org-1923 11 36 ' ' '' www-eff-org-1923 11 37 , , , www-eff-org-1923 11 38 ' ' `` www-eff-org-1923 11 39 BM BM NNP www-eff-org-1923 11 40 ' ' '' www-eff-org-1923 11 41 , , , www-eff-org-1923 11 42 ' ' `` www-eff-org-1923 11 43 BR BR NNP www-eff-org-1923 11 44 ' ' '' www-eff-org-1923 11 45 , , , www-eff-org-1923 11 46 ' ' `` www-eff-org-1923 11 47 CA CA NNP www-eff-org-1923 11 48 ' ' '' www-eff-org-1923 11 49 , , , www-eff-org-1923 11 50 ' ' `` www-eff-org-1923 11 51 CH CH NNP www-eff-org-1923 11 52 ' ' '' www-eff-org-1923 11 53 , , , www-eff-org-1923 11 54 ' ' '' www-eff-org-1923 11 55 CL CL NNP www-eff-org-1923 11 56 ' ' '' www-eff-org-1923 11 57 , , , www-eff-org-1923 11 58 ' ' '' www-eff-org-1923 11 59 CN CN NNP www-eff-org-1923 11 60 ' ' '' www-eff-org-1923 11 61 , , , www-eff-org-1923 11 62 ' ' `` www-eff-org-1923 11 63 CO CO NNP www-eff-org-1923 11 64 ' ' '' www-eff-org-1923 11 65 , , , www-eff-org-1923 11 66 ' ' `` www-eff-org-1923 11 67 CZ CZ NNP www-eff-org-1923 11 68 ' ' '' www-eff-org-1923 11 69 , , , www-eff-org-1923 11 70 ' ' `` www-eff-org-1923 11 71 DE DE NNP www-eff-org-1923 11 72 ' ' '' www-eff-org-1923 11 73 , , , www-eff-org-1923 11 74 ' ' `` www-eff-org-1923 11 75 DK DK NNP www-eff-org-1923 11 76 ' ' '' www-eff-org-1923 11 77 , , , www-eff-org-1923 11 78 ' ' `` www-eff-org-1923 11 79 EE EE NNP www-eff-org-1923 11 80 ' ' '' www-eff-org-1923 11 81 , , , www-eff-org-1923 11 82 ' ' `` www-eff-org-1923 11 83 ES es NN www-eff-org-1923 11 84 ' ' '' www-eff-org-1923 11 85 , , , www-eff-org-1923 11 86 ' ' '' www-eff-org-1923 11 87 EU EU NNP www-eff-org-1923 11 88 ' ' '' www-eff-org-1923 11 89 , , , www-eff-org-1923 11 90 ' ' `` www-eff-org-1923 11 91 FI fi JJ www-eff-org-1923 11 92 ' ' '' www-eff-org-1923 11 93 , , , www-eff-org-1923 11 94 ' ' '' www-eff-org-1923 11 95 FR FR NNP www-eff-org-1923 11 96 ' ' '' www-eff-org-1923 11 97 , , , www-eff-org-1923 11 98 ' ' `` www-eff-org-1923 11 99 GB GB NNP www-eff-org-1923 11 100 ' ' '' www-eff-org-1923 11 101 , , , www-eff-org-1923 11 102 ' ' '' www-eff-org-1923 11 103 HK HK NNP www-eff-org-1923 11 104 ' ' '' www-eff-org-1923 11 105 , , , www-eff-org-1923 11 106 ' ' '' www-eff-org-1923 11 107 HU HU NNP www-eff-org-1923 11 108 ' ' '' www-eff-org-1923 11 109 , , , www-eff-org-1923 11 110 ' ' `` www-eff-org-1923 11 111 IE IE NNP www-eff-org-1923 11 112 ' ' '' www-eff-org-1923 11 113 , , , www-eff-org-1923 11 114 ' ' `` www-eff-org-1923 11 115 IL IL NNP www-eff-org-1923 11 116 ' ' '' www-eff-org-1923 11 117 , , , www-eff-org-1923 11 118 ' ' `` www-eff-org-1923 11 119 IN in IN www-eff-org-1923 11 120 ' ' '' www-eff-org-1923 11 121 , , , www-eff-org-1923 11 122 ' ' `` www-eff-org-1923 11 123 IS be VBZ www-eff-org-1923 11 124 ' ' '' www-eff-org-1923 11 125 , , , www-eff-org-1923 11 126 ' ' `` www-eff-org-1923 11 127 IT it PRP www-eff-org-1923 11 128 ' ' '' www-eff-org-1923 11 129 , , , www-eff-org-1923 11 130 ' ' `` www-eff-org-1923 11 131 JP JP NNP www-eff-org-1923 11 132 ' ' '' www-eff-org-1923 11 133 , , , www-eff-org-1923 11 134 ' ' `` www-eff-org-1923 11 135 KR KR NNP www-eff-org-1923 11 136 ' ' '' www-eff-org-1923 11 137 , , , www-eff-org-1923 11 138 ' ' '' www-eff-org-1923 11 139 LT LT NNP www-eff-org-1923 11 140 ' ' '' www-eff-org-1923 11 141 , , , www-eff-org-1923 11 142 ' ' '' www-eff-org-1923 11 143 LV LV NNP www-eff-org-1923 11 144 ' ' '' www-eff-org-1923 11 145 , , , www-eff-org-1923 11 146 ' ' '' www-eff-org-1923 11 147 MK MK NNP www-eff-org-1923 11 148 ' ' '' www-eff-org-1923 11 149 , , , www-eff-org-1923 11 150 ' ' `` www-eff-org-1923 11 151 MO MO NNP www-eff-org-1923 11 152 ' ' '' www-eff-org-1923 11 153 , , , www-eff-org-1923 11 154 ' ' '' www-eff-org-1923 11 155 MX MX NNP www-eff-org-1923 11 156 ' ' '' www-eff-org-1923 11 157 , , , www-eff-org-1923 11 158 ' ' `` www-eff-org-1923 11 159 MY my UH www-eff-org-1923 11 160 ' ' '' www-eff-org-1923 11 161 , , , www-eff-org-1923 11 162 ' ' `` www-eff-org-1923 11 163 NL NL NNP www-eff-org-1923 11 164 ' ' '' www-eff-org-1923 11 165 , , , www-eff-org-1923 11 166 ' ' `` www-eff-org-1923 11 167 NO no UH www-eff-org-1923 11 168 ' ' '' www-eff-org-1923 11 169 , , , www-eff-org-1923 11 170 ' ' `` www-eff-org-1923 11 171 PL PL NNP www-eff-org-1923 11 172 ' ' '' www-eff-org-1923 11 173 , , , www-eff-org-1923 11 174 ' ' '' www-eff-org-1923 11 175 PT PT NNP www-eff-org-1923 11 176 ' ' '' www-eff-org-1923 11 177 , , , www-eff-org-1923 11 178 ' ' `` www-eff-org-1923 11 179 RO RO NNP www-eff-org-1923 11 180 ' ' '' www-eff-org-1923 11 181 , , , www-eff-org-1923 11 182 ' ' `` www-eff-org-1923 11 183 RU RU NNP www-eff-org-1923 11 184 ' ' '' www-eff-org-1923 11 185 , , , www-eff-org-1923 11 186 ' ' `` www-eff-org-1923 11 187 SE SE NNP www-eff-org-1923 11 188 ' ' '' www-eff-org-1923 11 189 , , , www-eff-org-1923 11 190 ' ' `` www-eff-org-1923 11 191 SG SG NNP www-eff-org-1923 11 192 ' ' '' www-eff-org-1923 11 193 , , , www-eff-org-1923 11 194 ' ' `` www-eff-org-1923 11 195 SI SI NNP www-eff-org-1923 11 196 ' ' '' www-eff-org-1923 11 197 , , , www-eff-org-1923 11 198 ' ' `` www-eff-org-1923 11 199 SK SK NNP www-eff-org-1923 11 200 ' ' '' www-eff-org-1923 11 201 , , , www-eff-org-1923 11 202 ' ' `` www-eff-org-1923 11 203 TN TN NNP www-eff-org-1923 11 204 ' ' '' www-eff-org-1923 11 205 , , , www-eff-org-1923 11 206 ' ' `` www-eff-org-1923 11 207 TR TR NNP www-eff-org-1923 11 208 ' ' '' www-eff-org-1923 11 209 , , , www-eff-org-1923 11 210 ' ' `` www-eff-org-1923 11 211 TW TW NNP www-eff-org-1923 11 212 ' ' '' www-eff-org-1923 11 213 , , , www-eff-org-1923 11 214 ' ' '' www-eff-org-1923 11 215 UK UK NNP www-eff-org-1923 11 216 ' ' '' www-eff-org-1923 11 217 , , , www-eff-org-1923 11 218 ' ' '' www-eff-org-1923 11 219 US US NNP www-eff-org-1923 11 220 ' ' '' www-eff-org-1923 11 221 , , , www-eff-org-1923 11 222 ' ' `` www-eff-org-1923 11 223 UY UY NNP www-eff-org-1923 11 224 ' ' '' www-eff-org-1923 11 225 , , , www-eff-org-1923 11 226 ' ' `` www-eff-org-1923 11 227 WW WW NNP www-eff-org-1923 11 228 ' ' '' www-eff-org-1923 11 229 , , , www-eff-org-1923 11 230 ' ' `` www-eff-org-1923 11 231 ZA ZA NNP www-eff-org-1923 11 232 ' ' '' www-eff-org-1923 11 233 ] ] -RRB- www-eff-org-1923 11 234       _SP www-eff-org-1923 11 235 Vulnerabilities vulnerability NNS www-eff-org-1923 11 236 ~30,000 ~30,000 NFP www-eff-org-1923 11 237 servers server NNS www-eff-org-1923 11 238 use use VBP www-eff-org-1923 11 239 broken broken JJ www-eff-org-1923 11 240 keys key NNS www-eff-org-1923 11 241 ~500 ~500 NNP www-eff-org-1923 11 242 had have VBD www-eff-org-1923 11 243 valid valid JJ www-eff-org-1923 11 244 CA CA NNP www-eff-org-1923 11 245 signatures signature NNS www-eff-org-1923 11 246 , , , www-eff-org-1923 11 247 including include VBG www-eff-org-1923 11 248 : : : www-eff-org-1923 11 249 diplomatie.be diplomatie.be ADD www-eff-org-1923 11 250 yandex.ru yandex.ru ADD www-eff-org-1923 11 251 lawwebmail.uchicago.edu lawwebmail.uchicago.edu NNS www-eff-org-1923 11 252 ( ( -LRB- www-eff-org-1923 11 253 now now RB www-eff-org-1923 11 254 fixed fix VBN www-eff-org-1923 11 255 / / SYM www-eff-org-1923 11 256 expired expire VBD www-eff-org-1923 11 257 ) ) -RRB- www-eff-org-1923 11 258       _SP www-eff-org-1923 11 259 Other other JJ www-eff-org-1923 11 260 whackiness whackiness NN www-eff-org-1923 11 261 Certificates Certificates NNPS www-eff-org-1923 11 262 that that WDT www-eff-org-1923 11 263 were be VBD www-eff-org-1923 11 264 and and CC www-eff-org-1923 11 265 were be VBD www-eff-org-1923 11 266 not not RB www-eff-org-1923 11 267 CA CA NNP www-eff-org-1923 11 268 certs cert VBZ www-eff-org-1923 11 269 Lots lot NNS www-eff-org-1923 11 270 of of IN www-eff-org-1923 11 271 certs cert NNS www-eff-org-1923 11 272 for for IN www-eff-org-1923 11 273 ” " `` www-eff-org-1923 11 274 localhost localhost JJ www-eff-org-1923 11 275 ” " '' www-eff-org-1923 11 276 , , , www-eff-org-1923 11 277 ” " '' www-eff-org-1923 11 278 mail mail NN www-eff-org-1923 11 279 ” " '' www-eff-org-1923 11 280 and and CC www-eff-org-1923 11 281 various various JJ www-eff-org-1923 11 282 IPs ips JJ www-eff-org-1923 11 283 Violations violation NNS www-eff-org-1923 11 284 of of IN www-eff-org-1923 11 285 Extended extended JJ www-eff-org-1923 11 286 Validation validation NN www-eff-org-1923 11 287 rules rule NNS www-eff-org-1923 11 288       _SP www-eff-org-1923 11 289 Also also RB www-eff-org-1923 11 290 , , , www-eff-org-1923 11 291 we -PRON- PRP www-eff-org-1923 11 292 've have VB www-eff-org-1923 11 293 published publish VBN www-eff-org-1923 11 294 the the DT www-eff-org-1923 11 295 data datum NNS www-eff-org-1923 11 296 , , , www-eff-org-1923 11 297 so so RB www-eff-org-1923 11 298 you -PRON- PRP www-eff-org-1923 11 299 can can MD www-eff-org-1923 11 300 do do VB www-eff-org-1923 11 301 further further JJ www-eff-org-1923 11 302 research research NN www-eff-org-1923 11 303 on on IN www-eff-org-1923 11 304 it -PRON- PRP www-eff-org-1923 11 305       _SP www-eff-org-1923 11 306 The the DT www-eff-org-1923 11 307 data datum NNS www-eff-org-1923 11 308 Available available JJ www-eff-org-1923 11 309 from from IN www-eff-org-1923 11 310 https://www.eff.org/observatory https://www.eff.org/observatory NN www-eff-org-1923 11 311 4 4 CD www-eff-org-1923 11 312 GB GB NNP www-eff-org-1923 11 313 download download NN www-eff-org-1923 11 314 / / SYM www-eff-org-1923 11 315 12 12 CD www-eff-org-1923 11 316 GB GB NNP www-eff-org-1923 11 317 MySQL MySQL NNP www-eff-org-1923 11 318 DB DB NNP www-eff-org-1923 11 319 ~10 ~10 NNP www-eff-org-1923 11 320 hours hour NNS www-eff-org-1923 11 321 to to TO www-eff-org-1923 11 322 import import VB www-eff-org-1923 11 323 on on IN www-eff-org-1923 11 324 a a DT www-eff-org-1923 11 325 fast fast JJ www-eff-org-1923 11 326 PC pc NN www-eff-org-1923 11 327 definitely definitely RB www-eff-org-1923 11 328 a a DT www-eff-org-1923 11 329 version version NN www-eff-org-1923 11 330 0 0 CD www-eff-org-1923 11 331 release release NN www-eff-org-1923 11 332 :) :) NFP www-eff-org-1923 11 333       _SP www-eff-org-1923 11 334 The the DT www-eff-org-1923 11 335 database database NN www-eff-org-1923 11 336 schema schema NN www-eff-org-1923 11 337 is be VBZ www-eff-org-1923 11 338 fairly fairly RB www-eff-org-1923 11 339 baroque baroque JJ www-eff-org-1923 11 340 . . . www-eff-org-1923 12 1 In in IN www-eff-org-1923 12 2 part part NN www-eff-org-1923 12 3 : : : www-eff-org-1923 12 4 blame blame NN www-eff-org-1923 12 5 X.509 X.509 NNP www-eff-org-1923 12 6 In in IN www-eff-org-1923 12 7 part part NN www-eff-org-1923 12 8 : : : www-eff-org-1923 12 9 only only RB www-eff-org-1923 12 10 2.5 2.5 CD www-eff-org-1923 12 11 of of IN www-eff-org-1923 12 12 us -PRON- PRP www-eff-org-1923 12 13 But but CC www-eff-org-1923 12 14 let let VB www-eff-org-1923 12 15 's -PRON- PRP www-eff-org-1923 12 16 show show VB www-eff-org-1923 12 17 you -PRON- PRP www-eff-org-1923 12 18 how how WRB www-eff-org-1923 12 19 to to TO www-eff-org-1923 12 20 use use VB www-eff-org-1923 12 21 it -PRON- PRP www-eff-org-1923 12 22 ! ! . www-eff-org-1923 13 1 get get VB www-eff-org-1923 13 2 the the DT www-eff-org-1923 13 3 torrent torrent JJ www-eff-org-1923 13 4 file file NN www-eff-org-1923 13 5 from from IN www-eff-org-1923 13 6 https://www.eff.org/observatory https://www.eff.org/observatory JJ www-eff-org-1923 13 7 bittorrent bittorrent NN www-eff-org-1923 13 8 ssl-database-paths-fixed-ext.sql.lzma.torrent ssl-database-paths-fixed-ext.sql.lzma.torrent NNP www-eff-org-1923 13 9 mysqladmin mysqladmin NN www-eff-org-1923 13 10 -u -u NN www-eff-org-1923 13 11 root root NN www-eff-org-1923 13 12 -p -p NN www-eff-org-1923 13 13 create create VBP www-eff-org-1923 13 14 observatory observatory NN www-eff-org-1923 13 15 unlzma unlzma JJ www-eff-org-1923 13 16 -c -c : www-eff-org-1923 13 17 ssl-database-paths-fixed-ext.sql.lzma ssl-database-paths-fixed-ext.sql.lzma NNP www-eff-org-1923 13 18 | | NNP www-eff-org-1923 13 19 mysql mysql NN www-eff-org-1923 13 20 -u -u HYPH www-eff-org-1923 13 21 root root NN www-eff-org-1923 13 22 -p -p : www-eff-org-1923 13 23 ( ( -LRB- www-eff-org-1923 13 24 ~ ~ NFP www-eff-org-1923 13 25 10 10 CD www-eff-org-1923 13 26 hours hour NNS www-eff-org-1923 13 27 later later RB www-eff-org-1923 13 28 ) ) -RRB- www-eff-org-1923 13 29 now now RB www-eff-org-1923 13 30 you -PRON- PRP www-eff-org-1923 13 31 have have VBP www-eff-org-1923 13 32 a a DT www-eff-org-1923 13 33 database database NN www-eff-org-1923 13 34 of of IN www-eff-org-1923 13 35 certs cert NNS www-eff-org-1923 13 36       _SP www-eff-org-1923 13 37 valid_certs valid_cert NNS www-eff-org-1923 13 38 } } -RRB- www-eff-org-1923 13 39 indexed index VBN www-eff-org-1923 13 40 by by IN www-eff-org-1923 13 41 certid certid NNP www-eff-org-1923 13 42 or or CC www-eff-org-1923 13 43 all_certs all_certs NNP www-eff-org-1923 13 44 } } -RRB- www-eff-org-1923 13 45 fingerprint fingerprint NN www-eff-org-1923 13 46 ( ( -LRB- www-eff-org-1923 13 47 SHA1 SHA1 NNP www-eff-org-1923 13 48 ) ) -RRB- www-eff-org-1923 13 49 names name NNS www-eff-org-1923 13 50 } } -RRB- www-eff-org-1923 13 51 Common Common NNP www-eff-org-1923 13 52 Names Names NNPS www-eff-org-1923 13 53 + + SYM www-eff-org-1923 13 54 Subject subject JJ www-eff-org-1923 13 55 anames aname NNS www-eff-org-1923 13 56 } } -RRB- www-eff-org-1923 13 57 Alternative Alternative NNP www-eff-org-1923 13 58 Names Names NNPS www-eff-org-1923 13 59 - - HYPH www-eff-org-1923 13 60 > > NN www-eff-org-1923 13 61 certids certid NNS www-eff-org-1923 13 62 certs_seen certs_seen CD www-eff-org-1923 13 63 : : : www-eff-org-1923 13 64 maps map NNS www-eff-org-1923 13 65 ( ( -LRB- www-eff-org-1923 13 66 time time NN www-eff-org-1923 13 67 , , , www-eff-org-1923 13 68 IP IP NNP www-eff-org-1923 13 69 ) ) -RRB- www-eff-org-1923 13 70 - - : www-eff-org-1923 13 71 > > NN www-eff-org-1923 13 72 fingerprint fingerprint NN www-eff-org-1923 13 73 ( ( -LRB- www-eff-org-1923 13 74 also also RB www-eff-org-1923 13 75 stores store NNS www-eff-org-1923 13 76 chain chain NN www-eff-org-1923 13 77 order order NN www-eff-org-1923 13 78 ) ) -RRB- www-eff-org-1923 13 79 Main main JJ www-eff-org-1923 13 80 db db NNP www-eff-org-1923 13 81 tables table VBZ www-eff-org-1923 13 82       _SP www-eff-org-1923 13 83 Some some DT www-eff-org-1923 13 84 simple simple JJ www-eff-org-1923 13 85 examples example NNS www-eff-org-1923 13 86 : : : www-eff-org-1923 13 87       _SP www-eff-org-1923 13 88 SELECT SELECT NNP www-eff-org-1923 13 89 RSA_Modulus_Bits RSA_Modulus_Bits NNP www-eff-org-1923 13 90 , , , www-eff-org-1923 13 91 count count NN www-eff-org-1923 13 92 ( ( -LRB- www-eff-org-1923 13 93 * * NFP www-eff-org-1923 13 94 ) ) -RRB- www-eff-org-1923 13 95 FROM from IN www-eff-org-1923 13 96 valid_certs valid_certs NNP www-eff-org-1923 13 97 GROUP GROUP NNP www-eff-org-1923 13 98 BY by IN www-eff-org-1923 13 99 RSA_Modulus_Bits rsa_modulus_bits NN www-eff-org-1923 13 100 ORDER order NN www-eff-org-1923 13 101 BY by IN www-eff-org-1923 13 102 cast(RSA_Modulus_Bits cast(rsa_modulus_bit NNS www-eff-org-1923 13 103 as as IN www-eff-org-1923 13 104 decimal decimal JJ www-eff-org-1923 13 105 ) ) -RRB- www-eff-org-1923 13 106 ; ; : www-eff-org-1923 13 107 + + NFP www-eff-org-1923 13 108 ------------------+----------+ ------------------+----------+ NFP www-eff-org-1923 13 109 | | NNP www-eff-org-1923 13 110 RSA_Modulus_Bits RSA_Modulus_Bits NNP www-eff-org-1923 13 111 | | NN www-eff-org-1923 13 112 count count NN www-eff-org-1923 13 113 ( ( -LRB- www-eff-org-1923 13 114 * * NFP www-eff-org-1923 13 115 ) ) -RRB- www-eff-org-1923 13 116 | | CD www-eff-org-1923 13 117 + + CD www-eff-org-1923 13 118 ------------------+----------+ ------------------+----------+ . www-eff-org-1923 13 119 | | NNP www-eff-org-1923 13 120 511 511 CD www-eff-org-1923 13 121 | | CD www-eff-org-1923 13 122 3 3 CD www-eff-org-1923 13 123 | | CD www-eff-org-1923 13 124 | | NNP www-eff-org-1923 13 125 512 512 CD www-eff-org-1923 13 126 | | CD www-eff-org-1923 13 127 3977 3977 CD www-eff-org-1923 13 128 | | CD www-eff-org-1923 13 129 | | CD www-eff-org-1923 13 130 730 730 CD www-eff-org-1923 13 131 | | CD www-eff-org-1923 13 132 1 1 CD www-eff-org-1923 13 133 | | CD www-eff-org-1923 13 134 | | CD www-eff-org-1923 13 135 767 767 CD www-eff-org-1923 13 136 | | CD www-eff-org-1923 13 137 1 1 CD www-eff-org-1923 13 138 | | CD www-eff-org-1923 13 139 | | CD www-eff-org-1923 13 140 768 768 CD www-eff-org-1923 13 141 | | CD www-eff-org-1923 13 142 34 34 CD www-eff-org-1923 13 143 | | CD www-eff-org-1923 13 144 | | CD www-eff-org-1923 13 145 1023 1023 CD www-eff-org-1923 13 146 | | CD www-eff-org-1923 13 147 968 968 CD www-eff-org-1923 13 148 | | CD www-eff-org-1923 13 149 | | CD www-eff-org-1923 13 150 1024 1024 CD www-eff-org-1923 13 151 | | CD www-eff-org-1923 13 152 821900 821900 CD www-eff-org-1923 13 153 | | CD www-eff-org-1923 13 154 | | CD www-eff-org-1923 13 155 ... ... : www-eff-org-1923 13 156 | | CD www-eff-org-1923 13 157 ... ... NFP www-eff-org-1923 13 158 | | CD www-eff-org-1923 13 159 + + NNS www-eff-org-1923 13 160 ------------------+----------+ ------------------+----------+ . www-eff-org-1923 13 161       _SP www-eff-org-1923 13 162 SELECT SELECT NNP www-eff-org-1923 13 163 ` ` '' www-eff-org-1923 13 164 Signature Signature NNP www-eff-org-1923 13 165 Algorithm Algorithm NNP www-eff-org-1923 13 166 ` ` '' www-eff-org-1923 13 167 , , , www-eff-org-1923 13 168 count count NN www-eff-org-1923 13 169 ( ( -LRB- www-eff-org-1923 13 170 * * NFP www-eff-org-1923 13 171 ) ) -RRB- www-eff-org-1923 13 172 FROM from IN www-eff-org-1923 13 173 valid_certs valid_cert NNS www-eff-org-1923 13 174 WHERE where WRB www-eff-org-1923 13 175 startdate startdate VBP www-eff-org-1923 13 176 > > XX www-eff-org-1923 13 177 ” " '' www-eff-org-1923 13 178 2010 2010 CD www-eff-org-1923 13 179 ” " '' www-eff-org-1923 13 180 GROUP GROUP NNP www-eff-org-1923 13 181 BY by IN www-eff-org-1923 13 182 ` ` '' www-eff-org-1923 13 183 Signature Signature NNP www-eff-org-1923 13 184 Algorithm Algorithm NNP www-eff-org-1923 13 185 ` ` '' www-eff-org-1923 13 186 ; ; : www-eff-org-1923 13 187 + + NFP www-eff-org-1923 13 188 --------------------------+----------+ --------------------------+----------+ . www-eff-org-1923 13 189 | | NNP www-eff-org-1923 13 190 Signature Signature NNP www-eff-org-1923 13 191 Algorithm Algorithm NNP www-eff-org-1923 13 192 | | NN www-eff-org-1923 13 193 count count NN www-eff-org-1923 13 194 ( ( -LRB- www-eff-org-1923 13 195 * * NFP www-eff-org-1923 13 196 ) ) -RRB- www-eff-org-1923 13 197 | | CD www-eff-org-1923 13 198 + + NNS www-eff-org-1923 13 199 --------------------------+----------+ --------------------------+----------+ . www-eff-org-1923 13 200 | | NNP www-eff-org-1923 13 201 md5WithRSAEncryption md5WithRSAEncryption NNP www-eff-org-1923 13 202 | | NNP www-eff-org-1923 13 203 3 3 CD www-eff-org-1923 13 204 | | CD www-eff-org-1923 13 205 | | CD www-eff-org-1923 13 206 sha1WithRSAEncryption sha1withrsaencryption NN www-eff-org-1923 13 207 | | CD www-eff-org-1923 13 208 455511 455511 CD www-eff-org-1923 13 209 | | CD www-eff-org-1923 13 210 | | CD www-eff-org-1923 13 211 sha256WithRSAEncryption sha256withrsaencryption CD www-eff-org-1923 13 212 | | CD www-eff-org-1923 13 213 17 17 CD www-eff-org-1923 13 214 | | CD www-eff-org-1923 13 215 | | CD www-eff-org-1923 13 216 sha512WithRSAEncryption sha512withrsaencryption CD www-eff-org-1923 13 217 | | CD www-eff-org-1923 13 218 1 1 CD www-eff-org-1923 13 219 | | CD www-eff-org-1923 13 220 + + NNS www-eff-org-1923 13 221 --------------------------+----------+ --------------------------+----------+ . www-eff-org-1923 13 222       _SP www-eff-org-1923 13 223 SELECT SELECT NNP www-eff-org-1923 13 224 distinct distinct JJ www-eff-org-1923 13 225 issuer issuer NN www-eff-org-1923 13 226 FROM from IN www-eff-org-1923 13 227 valid_certs valid_cert NNS www-eff-org-1923 13 228 WHERE where WRB www-eff-org-1923 13 229 stardate stardate VBP www-eff-org-1923 13 230 > > XX www-eff-org-1923 13 231 ” " '' www-eff-org-1923 13 232 2010 2010 CD www-eff-org-1923 13 233 ” " '' www-eff-org-1923 13 234 AND and CC www-eff-org-1923 13 235 ` ` '' www-eff-org-1923 13 236 Signature Signature NNP www-eff-org-1923 13 237 Algorithm`= Algorithm`= NNP www-eff-org-1923 13 238 " " '' www-eff-org-1923 13 239 md5WithRSAEncryption md5withrsaencryption NN www-eff-org-1923 13 240 " " '' www-eff-org-1923 13 241 ; ; , www-eff-org-1923 13 242 + + CC www-eff-org-1923 13 243 ------------------------------------------------------------------------+ ------------------------------------------------------------------------+ NNP www-eff-org-1923 13 244 | | NNP www-eff-org-1923 13 245 issuer issuer NN www-eff-org-1923 13 246 | | CD www-eff-org-1923 13 247 + + CC www-eff-org-1923 13 248 ------------------------------------------------------------------------+ ------------------------------------------------------------------------+ NN www-eff-org-1923 13 249 | | NNP www-eff-org-1923 13 250 O o NN www-eff-org-1923 13 251 = = NFP www-eff-org-1923 13 252 Ministere Ministere NNP www-eff-org-1923 13 253 de de FW www-eff-org-1923 13 254 la la NNP www-eff-org-1923 13 255 Justice Justice NNP www-eff-org-1923 13 256 , , , www-eff-org-1923 13 257 CN CN NNP www-eff-org-1923 13 258 = = SYM www-eff-org-1923 13 259 Autorite Autorite NNP www-eff-org-1923 13 260 de de NNP www-eff-org-1923 13 261 Certification Certification NNP www-eff-org-1923 13 262 Serveurs Serveurs NNP www-eff-org-1923 13 263 | | NNP www-eff-org-1923 13 264 | | NNP www-eff-org-1923 13 265 C C NNP www-eff-org-1923 13 266 = = SYM www-eff-org-1923 13 267 US US NNP www-eff-org-1923 13 268 , , , www-eff-org-1923 13 269 O o UH www-eff-org-1923 13 270 = = SYM www-eff-org-1923 13 271 Anthem Anthem NNP www-eff-org-1923 13 272 Inc Inc NNP www-eff-org-1923 13 273 , , , www-eff-org-1923 13 274 OU OU NNP www-eff-org-1923 13 275 = = SYM www-eff-org-1923 13 276 Ecommerce Ecommerce NNP www-eff-org-1923 13 277 , , , www-eff-org-1923 13 278 CN CN NNP www-eff-org-1923 13 279 = = SYM www-eff-org-1923 13 280 Anthem Anthem NNP www-eff-org-1923 13 281 Inc Inc NNP www-eff-org-1923 13 282 Certificate Certificate NNP www-eff-org-1923 13 283 Authority Authority NNP www-eff-org-1923 13 284 | | CD www-eff-org-1923 13 285 + + SYM www-eff-org-1923 13 286 ------------------------------------------------------------------------+ ------------------------------------------------------------------------+ NNP www-eff-org-1923 13 287 ( ( -LRB- www-eff-org-1923 13 288 fortunately fortunately RB www-eff-org-1923 13 289 , , , www-eff-org-1923 13 290 these these DT www-eff-org-1923 13 291 CAs ca NNS www-eff-org-1923 13 292 do do VBP www-eff-org-1923 13 293 n't not RB www-eff-org-1923 13 294 robo robo VB www-eff-org-1923 13 295 sign sign NN www-eff-org-1923 13 296 ) ) -RRB- www-eff-org-1923 13 297       _SP www-eff-org-1923 13 298 Caveats caveat NNS www-eff-org-1923 13 299 ... ... : www-eff-org-1923 14 1 Some some DT www-eff-org-1923 14 2 fields field NNS www-eff-org-1923 14 3 ( ( -LRB- www-eff-org-1923 14 4 name name NN www-eff-org-1923 14 5 , , , www-eff-org-1923 14 6 IP IP NNP www-eff-org-1923 14 7 ) ) -RRB- www-eff-org-1923 14 8 in in IN www-eff-org-1923 14 9 the the DT www-eff-org-1923 14 10 _ _ NNP www-eff-org-1923 14 11 certs cert NNS www-eff-org-1923 14 12 tables table NNS www-eff-org-1923 14 13 are be VBP www-eff-org-1923 14 14 correct correct JJ www-eff-org-1923 14 15 but but CC www-eff-org-1923 14 16 not not RB www-eff-org-1923 14 17 comprehensive comprehensive JJ www-eff-org-1923 14 18 SELECT SELECT NNP www-eff-org-1923 14 19 count(distinct count(distinct JJ www-eff-org-1923 14 20 ip ip NN www-eff-org-1923 14 21 ) ) -RRB- www-eff-org-1923 14 22 FROM from IN www-eff-org-1923 14 23 all_certs all_certs NNP www-eff-org-1923 14 24 -- -- : www-eff-org-1923 14 25 5,536,773 5,536,773 CD www-eff-org-1923 14 26 SELECT SELECT NNPS www-eff-org-1923 14 27 count(distinct count(distinct JJ www-eff-org-1923 14 28 ip ip NN www-eff-org-1923 14 29 ) ) -RRB- www-eff-org-1923 14 30 FROM from IN www-eff-org-1923 14 31 seen see VBN www-eff-org-1923 14 32 -- -- : www-eff-org-1923 14 33 11,373,755 11,373,755 CD www-eff-org-1923 14 34 ( ( -LRB- www-eff-org-1923 14 35 the the DT www-eff-org-1923 14 36 former former JJ www-eff-org-1923 14 37 undercounts undercount NNS www-eff-org-1923 14 38 due due JJ www-eff-org-1923 14 39 to to IN www-eff-org-1923 14 40 certs cert NNS www-eff-org-1923 14 41 seen see VBN www-eff-org-1923 14 42 on on IN www-eff-org-1923 14 43 multiple multiple JJ www-eff-org-1923 14 44 IPs ip NNS www-eff-org-1923 14 45 ) ) -RRB- www-eff-org-1923 14 46       _SP www-eff-org-1923 14 47 some some DT www-eff-org-1923 14 48 columns column NNS www-eff-org-1923 14 49 have have VBP www-eff-org-1923 14 50 unintuitive unintuitive JJ www-eff-org-1923 14 51 semantics semantic NNS www-eff-org-1923 14 52 ; ; : www-eff-org-1923 14 53 moz_valid moz_valid NNP www-eff-org-1923 14 54 , , , www-eff-org-1923 14 55 ms_valid ms_valid NNP www-eff-org-1923 14 56 are be VBP www-eff-org-1923 14 57 the the DT www-eff-org-1923 14 58 outputs output NNS www-eff-org-1923 14 59 of of IN www-eff-org-1923 14 60 : : : www-eff-org-1923 14 61 openssl openssl NN www-eff-org-1923 14 62 verify verify VB www-eff-org-1923 14 63 -CApath -capath FW www-eff-org-1923 14 64 < < XX www-eff-org-1923 14 65 roots root NNS www-eff-org-1923 14 66 > > XX www-eff-org-1923 14 67 -untrusted -untruste VBN www-eff-org-1923 14 68 < < XX www-eff-org-1923 14 69 rest rest NN www-eff-org-1923 14 70 of of IN www-eff-org-1923 14 71 chain chain NN www-eff-org-1923 14 72 > > XX www-eff-org-1923 14 73 cert cert NN www-eff-org-1923 14 74 ; ; : www-eff-org-1923 14 75 eg eg LS www-eff-org-1923 14 76 : : : www-eff-org-1923 14 77 Yes yes UH www-eff-org-1923 14 78 Yes yes UH www-eff-org-1923 14 79 self self NN www-eff-org-1923 14 80 - - HYPH www-eff-org-1923 14 81 signed sign VBN www-eff-org-1923 14 82 : : : www-eff-org-1923 14 83 OK ok UH www-eff-org-1923 14 84 self self NN www-eff-org-1923 14 85 - - HYPH www-eff-org-1923 14 86 signed sign VBN www-eff-org-1923 14 87 : : : www-eff-org-1923 14 88 /CN /CN . www-eff-org-1923 14 89 = = NFP www-eff-org-1923 14 90 sw sw NNP www-eff-org-1923 14 91 - - JJ www-eff-org-1923 14 92 mhs mhs JJ www-eff-org-1923 14 93 - - HYPH www-eff-org-1923 14 94 ser-3750 ser-3750 NN www-eff-org-1923 14 95 - - HYPH www-eff-org-1923 14 96 1./unstructuredName 1./unstructuredname NN www-eff-org-1923 14 97 = = SYM www-eff-org-1923 14 98 sw sw JJ www-eff-org-1923 14 99 - - JJ www-eff-org-1923 14 100 mhs mhs JJ www-eff-org-1923 14 101 - - HYPH www-eff-org-1923 14 102 ser-3750 ser-3750 NN www-eff-org-1923 14 103 - - HYPH www-eff-org-1923 14 104 1 1 CD www-eff-org-1923 14 105 . . . www-eff-org-1923 15 1 error error NN www-eff-org-1923 15 2 10 10 CD www-eff-org-1923 15 3 at at IN www-eff-org-1923 15 4 0 0 CD www-eff-org-1923 15 5 depth depth NN www-eff-org-1923 15 6 lookup lookup NN www-eff-org-1923 15 7 : : : www-eff-org-1923 15 8 certificate certificate NN www-eff-org-1923 15 9 has have VBZ www-eff-org-1923 15 10 expired expire VBN www-eff-org-1923 15 11 OK ok UH www-eff-org-1923 15 12 Yes yes UH www-eff-org-1923 15 13 Yes yes UH www-eff-org-1923 15 14 self self NN www-eff-org-1923 15 15 - - HYPH www-eff-org-1923 15 16 signed sign VBN www-eff-org-1923 15 17 : : : www-eff-org-1923 15 18 in in IN www-eff-org-1923 15 19 certificate certificate NN www-eff-org-1923 15 20 chain chain NN www-eff-org-1923 15 21 self self NN www-eff-org-1923 15 22 - - HYPH www-eff-org-1923 15 23 signed sign VBN www-eff-org-1923 15 24 : : : www-eff-org-1923 15 25 OK ok UH www-eff-org-1923 15 26 No no UH www-eff-org-1923 15 27 : : : www-eff-org-1923 15 28 ' ' '' www-eff-org-1923 15 29 stdin stdin NN www-eff-org-1923 15 30 : : : www-eff-org-1923 15 31 /C /C . www-eff-org-1923 15 32 = = NFP www-eff-org-1923 15 33 US US NNP www-eff-org-1923 15 34 / / SYM www-eff-org-1923 15 35 ST ST NNP www-eff-org-1923 15 36 = = SYM www-eff-org-1923 15 37 Default Default NNP www-eff-org-1923 15 38 State State NNP www-eff-org-1923 15 39 / / SYM www-eff-org-1923 15 40 L L NNP www-eff-org-1923 15 41 = = SYM www-eff-org-1923 15 42 Default Default NNP www-eff-org-1923 15 43 Locality locality NN www-eff-org-1923 15 44 / / SYM www-eff-org-1923 15 45 O o NN www-eff-org-1923 15 46 = = SYM www-eff-org-1923 15 47 American American NNP www-eff-org-1923 15 48 Power Power NNP www-eff-org-1923 15 49 Conversion Conversion NNP www-eff-org-1923 15 50 Corp Corp NNP www-eff-org-1923 15 51 / / SYM www-eff-org-1923 15 52 OU OU NNP www-eff-org-1923 15 53 = = SYM www-eff-org-1923 15 54 Internally internally RB www-eff-org-1923 15 55 Generated Generated NNP www-eff-org-1923 15 56 Certificate Certificate NNP www-eff-org-1923 15 57 / / SYM www-eff-org-1923 15 58 CN CN NNP www-eff-org-1923 15 59 = = SYM www-eff-org-1923 15 60 ZA0535013730\\n ZA0535013730\\n NNP www-eff-org-1923 15 61 error error NN www-eff-org-1923 15 62 20 20 CD www-eff-org-1923 15 63 at at IN www-eff-org-1923 15 64 0 0 CD www-eff-org-1923 15 65 depth depth NN www-eff-org-1923 15 66 lookup lookup NN www-eff-org-1923 15 67 : : : www-eff-org-1923 15 68 unable unable JJ www-eff-org-1923 15 69 to to TO www-eff-org-1923 15 70 get get VB www-eff-org-1923 15 71 local local JJ www-eff-org-1923 15 72 issuer issuer NN www-eff-org-1923 15 73 certificate\\n'None certificate\\n'None NNP www-eff-org-1923 15 74 So so RB www-eff-org-1923 15 75 : : : www-eff-org-1923 15 76 select select NNP www-eff-org-1923 15 77 count count NN www-eff-org-1923 15 78 ( ( -LRB- www-eff-org-1923 15 79 * * NFP www-eff-org-1923 15 80 ) ) -RRB- www-eff-org-1923 15 81 from from IN www-eff-org-1923 15 82 valid_certs valid_certs NNP www-eff-org-1923 15 83 where where WRB www-eff-org-1923 15 84 moz_valid=”Yes moz_valid=”Yes NNP www-eff-org-1923 15 85 ” " '' www-eff-org-1923 15 86 →1,359,292 →1,359,292 NFP www-eff-org-1923 15 87 select select NNP www-eff-org-1923 15 88 count count NN www-eff-org-1923 15 89 ( ( -LRB- www-eff-org-1923 15 90 * * NFP www-eff-org-1923 15 91 ) ) -RRB- www-eff-org-1923 15 92 from from IN www-eff-org-1923 15 93 valid_certs valid_certs NNP www-eff-org-1923 15 94 where where WRB www-eff-org-1923 15 95 not not RB www-eff-org-1923 15 96 moz_valid=”Yes moz_valid=”yes CD www-eff-org-1923 15 97 ” " '' www-eff-org-1923 15 98 → → SYM www-eff-org-1923 15 99 174,067 174,067 CD www-eff-org-1923 15 100 select select JJ www-eff-org-1923 15 101 count count NN www-eff-org-1923 15 102 ( ( -LRB- www-eff-org-1923 15 103 * * NFP www-eff-org-1923 15 104 ) ) -RRB- www-eff-org-1923 15 105 from from IN www-eff-org-1923 15 106 valid_certs valid_certs NNP www-eff-org-1923 15 107 where where WRB www-eff-org-1923 15 108 not not RB www-eff-org-1923 15 109 ms_valid=”Yes ms_valid=”yes CD www-eff-org-1923 15 110 ” " '' www-eff-org-1923 15 111 → → SYM www-eff-org-1923 15 112 213,401 213,401 CD www-eff-org-1923 15 113       _SP www-eff-org-1923 15 114 Firefox Firefox NNP www-eff-org-1923 15 115 and and CC www-eff-org-1923 15 116 IE IE NNP www-eff-org-1923 15 117 cache cache JJ www-eff-org-1923 15 118 intermediate intermediate JJ www-eff-org-1923 15 119 CA CA NNP www-eff-org-1923 15 120 certificates certificate NNS www-eff-org-1923 15 121 ... ... . www-eff-org-1923 16 1 So so CC www-eff-org-1923 16 2 OpenSSL OpenSSL `` www-eff-org-1923 16 3 ca can MD www-eff-org-1923 16 4 n't not RB www-eff-org-1923 16 5 necessarily necessarily RB www-eff-org-1923 16 6 say say VB www-eff-org-1923 16 7 whether whether IN www-eff-org-1923 16 8 a a DT www-eff-org-1923 16 9 cert cert NN www-eff-org-1923 16 10 is be VBZ www-eff-org-1923 16 11 valid valid JJ www-eff-org-1923 16 12 in in IN www-eff-org-1923 16 13 these these DT www-eff-org-1923 16 14 browsers browser NNS www-eff-org-1923 16 15 ( ( -LRB- www-eff-org-1923 16 16 ! ! . www-eff-org-1923 16 17 ! ! . www-eff-org-1923 16 18 ! ! . www-eff-org-1923 16 19 ) ) -RRB- www-eff-org-1923 17 1 Even even RB www-eff-org-1923 17 2 worse bad JJR www-eff-org-1923 17 3 ... ... : www-eff-org-1923 17 4       _SP www-eff-org-1923 17 5 ” " '' www-eff-org-1923 17 6 Transvalidity Transvalidity NNP www-eff-org-1923 17 7 ” " '' www-eff-org-1923 17 8 valid valid JJ www-eff-org-1923 17 9 , , , www-eff-org-1923 17 10 but but CC www-eff-org-1923 17 11 only only RB www-eff-org-1923 17 12 if if IN www-eff-org-1923 17 13 the the DT www-eff-org-1923 17 14 browser browser NN www-eff-org-1923 17 15 cached cache VBD www-eff-org-1923 17 16 the the DT www-eff-org-1923 17 17 right right JJ www-eff-org-1923 17 18 intermediate intermediate JJ www-eff-org-1923 17 19 CA CA NNP www-eff-org-1923 17 20 certs cert NNS www-eff-org-1923 17 21 first first RB www-eff-org-1923 17 22 → → NFP www-eff-org-1923 17 23 we -PRON- PRP www-eff-org-1923 17 24 catch catch VBP www-eff-org-1923 17 25 all all DT www-eff-org-1923 17 26 / / SYM www-eff-org-1923 17 27 almost almost RB www-eff-org-1923 17 28 all all DT www-eff-org-1923 17 29 transvalid transvalid JJ www-eff-org-1923 17 30 certs cert NNS www-eff-org-1923 17 31       _SP www-eff-org-1923 17 32 explaining explain VBG www-eff-org-1923 17 33 transvalidity.py transvalidity.py : www-eff-org-1923 17 34 First first RB www-eff-org-1923 17 35 , , , www-eff-org-1923 17 36 find find VB www-eff-org-1923 17 37 invalid invalid JJ www-eff-org-1923 17 38 certs cert NNS www-eff-org-1923 17 39 where where WRB www-eff-org-1923 17 40 a a DT www-eff-org-1923 17 41 plausible plausible JJ www-eff-org-1923 17 42 , , , www-eff-org-1923 17 43 valid valid JJ www-eff-org-1923 17 44 intermediate intermediate JJ www-eff-org-1923 17 45 cert cert NN www-eff-org-1923 17 46 was be VBD www-eff-org-1923 17 47 seen see VBN www-eff-org-1923 17 48 somewhere somewhere RB www-eff-org-1923 17 49 in in IN www-eff-org-1923 17 50 the the DT www-eff-org-1923 17 51 SSLiverse SSLiverse NNP www-eff-org-1923 17 52 : : : www-eff-org-1923 17 53 SELECT select VB www-eff-org-1923 17 54 certs1.path certs1.path NNP www-eff-org-1923 17 55 , , , www-eff-org-1923 17 56 certs1.id certs1.id NN www-eff-org-1923 17 57 , , , www-eff-org-1923 17 58 valid_certs.path valid_certs.path NN www-eff-org-1923 17 59 , , , www-eff-org-1923 17 60 certs1.fingerprint certs1.fingerprint NNP www-eff-org-1923 17 61 , , , www-eff-org-1923 17 62 certs1.fetchtime certs1.fetchtime CD www-eff-org-1923 17 63 FROM from IN www-eff-org-1923 17 64 certs1 certs1 NN www-eff-org-1923 17 65 join join NN www-eff-org-1923 17 66 valid_certs valid_cert NNS www-eff-org-1923 17 67 ON ON NNP www-eff-org-1923 17 68 certs1.issuer certs1.issuer , www-eff-org-1923 17 69 = = SYM www-eff-org-1923 17 70 valid_certs.subject valid_certs.subject NN www-eff-org-1923 17 71 and and CC www-eff-org-1923 17 72 ( ( -LRB- www-eff-org-1923 17 73 ( ( -LRB- www-eff-org-1923 17 74 certs1.`Authority certs1.`authority NN www-eff-org-1923 17 75 Key Key NNP www-eff-org-1923 17 76 Identifier Identifier NNP www-eff-org-1923 17 77 : : : www-eff-org-1923 17 78 keyid keyid NNS www-eff-org-1923 17 79 ` ` '' www-eff-org-1923 17 80 is be VBZ www-eff-org-1923 17 81 null null JJ www-eff-org-1923 17 82 and and CC www-eff-org-1923 17 83 valid_certs valid_cert NNS www-eff-org-1923 17 84 . . . www-eff-org-1923 17 85 `Subject `subject DT www-eff-org-1923 17 86 Key Key NNP www-eff-org-1923 17 87 Identifier Identifier NNP www-eff-org-1923 17 88 ` ` '' www-eff-org-1923 17 89 is be VBZ www-eff-org-1923 17 90 null null JJ www-eff-org-1923 17 91 ) ) -RRB- www-eff-org-1923 17 92 or or CC www-eff-org-1923 17 93 certs1.`Authority certs1.`Authority NNP www-eff-org-1923 17 94 Key Key NNP www-eff-org-1923 17 95 Identifier Identifier NNP www-eff-org-1923 17 96 : : : www-eff-org-1923 17 97 keyid keyid NNP www-eff-org-1923 17 98 ` ` '' www-eff-org-1923 17 99 = = SYM www-eff-org-1923 17 100 valid_certs valid_certs NNP www-eff-org-1923 17 101 . . . www-eff-org-1923 17 102 `Subject `subject DT www-eff-org-1923 17 103 Key Key NNP www-eff-org-1923 17 104 Identifier Identifier NNP www-eff-org-1923 17 105 ` ` '' www-eff-org-1923 17 106 ) ) -RRB- www-eff-org-1923 17 107 WHERE where WRB www-eff-org-1923 17 108 not not RB www-eff-org-1923 17 109 certs1.valid certs1.valid , www-eff-org-1923 17 110 and and CC www-eff-org-1923 17 111 ( ( -LRB- www-eff-org-1923 17 112 locate("unable locate("unable JJ www-eff-org-1923 17 113 to to TO www-eff-org-1923 17 114 get get VB www-eff-org-1923 17 115 local local JJ www-eff-org-1923 17 116 issuer issuer NN www-eff-org-1923 17 117 certificate certificate NN www-eff-org-1923 17 118 " " '' www-eff-org-1923 17 119 , , , www-eff-org-1923 17 120 certs1.moz_valid certs1.moz_valid , www-eff-org-1923 17 121 ) ) -RRB- www-eff-org-1923 17 122 or or CC www-eff-org-1923 17 123 locate("unable locate("unable NNP www-eff-org-1923 17 124 to to TO www-eff-org-1923 17 125 get get VB www-eff-org-1923 17 126 local local JJ www-eff-org-1923 17 127 issuer issuer NN www-eff-org-1923 17 128 certificate certificate NN www-eff-org-1923 17 129 " " '' www-eff-org-1923 17 130 , , , www-eff-org-1923 17 131 certs1.ms_valid certs1.ms_valid NN www-eff-org-1923 17 132 ) ) -RRB- www-eff-org-1923 17 133 ) ) -RRB- www-eff-org-1923 17 134 GROUP GROUP NNP www-eff-org-1923 17 135 BY by IN www-eff-org-1923 17 136 certs1.fingerprint certs1.fingerprint CD www-eff-org-1923 17 137 , , , www-eff-org-1923 17 138 valid_certs.path valid_certs.path NN www-eff-org-1923 17 139 Note note NN www-eff-org-1923 17 140 : : : www-eff-org-1923 17 141 some some DT www-eff-org-1923 17 142 variable variable JJ www-eff-org-1923 17 143 names name NNS www-eff-org-1923 17 144 were be VBD www-eff-org-1923 17 145 simplified simplify VBN www-eff-org-1923 17 146 in in IN www-eff-org-1923 17 147 this this DT www-eff-org-1923 17 148 query query NN www-eff-org-1923 17 149 : : : www-eff-org-1923 17 150 certs1 certs1 NNP www-eff-org-1923 17 151 is be VBZ www-eff-org-1923 17 152 an an DT www-eff-org-1923 17 153 example example NN www-eff-org-1923 17 154 raw raw JJ www-eff-org-1923 17 155 input input NN www-eff-org-1923 17 156 certs cert NNS www-eff-org-1923 17 157 table table NN www-eff-org-1923 17 158 , , , www-eff-org-1923 17 159 Authority Authority NNP www-eff-org-1923 17 160 Key Key NNP www-eff-org-1923 17 161 IDs id NNS www-eff-org-1923 17 162 have have VBP www-eff-org-1923 17 163 longer long JJR www-eff-org-1923 17 164 column column NN www-eff-org-1923 17 165 names name NNS www-eff-org-1923 17 166       _SP www-eff-org-1923 17 167 transvalidity.py transvalidity.py ADD www-eff-org-1923 17 168 ( ( -LRB- www-eff-org-1923 17 169 ct'd ct'd NN www-eff-org-1923 17 170 ) ) -RRB- www-eff-org-1923 17 171 Once once IN www-eff-org-1923 17 172 we -PRON- PRP www-eff-org-1923 17 173 have have VBP www-eff-org-1923 17 174 some some DT www-eff-org-1923 17 175 missing missing JJ www-eff-org-1923 17 176 , , , www-eff-org-1923 17 177 valid valid JJ www-eff-org-1923 17 178 , , , www-eff-org-1923 17 179 possibly possibly RB www-eff-org-1923 17 180 determinative determinative JJ www-eff-org-1923 17 181 CA CA NNP www-eff-org-1923 17 182 certs cert NNS www-eff-org-1923 17 183 , , , www-eff-org-1923 17 184 we -PRON- PRP www-eff-org-1923 17 185 re re VBP www-eff-org-1923 17 186 - - VBP www-eff-org-1923 17 187 run run VBP www-eff-org-1923 17 188 OpenSSL OpenSSL '' www-eff-org-1923 17 189 : : : www-eff-org-1923 17 190 openssl openssl NN www-eff-org-1923 17 191 verify verify VB www-eff-org-1923 17 192 -CApath -CApath NNP www-eff-org-1923 17 193 < < XX www-eff-org-1923 17 194 all all DT www-eff-org-1923 17 195 roots root NNS www-eff-org-1923 17 196 > > NFP www-eff-org-1923 17 197 -untrusted -untruste VBN www-eff-org-1923 17 198 < < XX www-eff-org-1923 17 199 rest rest NN www-eff-org-1923 17 200 of of IN www-eff-org-1923 17 201 chain chain NN www-eff-org-1923 17 202 + + SYM www-eff-org-1923 17 203 query query NN www-eff-org-1923 17 204 results result VBZ www-eff-org-1923 17 205 > > XX www-eff-org-1923 17 206 cert cert NN www-eff-org-1923 17 207 Results result NNS www-eff-org-1923 17 208 go go VBP www-eff-org-1923 17 209 in in IN www-eff-org-1923 17 210 the the DT www-eff-org-1923 17 211 ” " `` www-eff-org-1923 17 212 transvalid transvalid NNP www-eff-org-1923 17 213 ” " '' www-eff-org-1923 17 214 column column NN www-eff-org-1923 17 215 select select NNP www-eff-org-1923 17 216 count count NNP www-eff-org-1923 17 217 ( ( -LRB- www-eff-org-1923 17 218 * * NFP www-eff-org-1923 17 219 ) ) -RRB- www-eff-org-1923 17 220 from from IN www-eff-org-1923 17 221 valid_certs valid_certs NNP www-eff-org-1923 17 222 where where WRB www-eff-org-1923 17 223 transvalid="Yes transvalid="Yes NNP www-eff-org-1923 17 224 " " '' www-eff-org-1923 17 225 → → SYM www-eff-org-1923 17 226 97,676 97,676 CD www-eff-org-1923 17 227 tranvalid tranvalid NN www-eff-org-1923 17 228 certs cert NNS www-eff-org-1923 17 229       _SP www-eff-org-1923 17 230 boolean boolean NNP www-eff-org-1923 17 231 valid valid NNP www-eff-org-1923 17 232 = = NFP www-eff-org-1923 17 233 ( ( -LRB- www-eff-org-1923 17 234 moz_valid moz_valid NNS www-eff-org-1923 17 235 = = NFP www-eff-org-1923 17 236 = = NFP www-eff-org-1923 17 237 ” " `` www-eff-org-1923 17 238 Yes yes UH www-eff-org-1923 17 239 ” " '' www-eff-org-1923 17 240 or or CC www-eff-org-1923 17 241 ms_valid ms_valid NNP www-eff-org-1923 17 242 = = NFP www-eff-org-1923 17 243 = = SYM www-eff-org-1923 17 244 ” " `` www-eff-org-1923 17 245 Yes yes UH www-eff-org-1923 17 246 ” " '' www-eff-org-1923 17 247 or or CC www-eff-org-1923 17 248 transvalid transvalid JJ www-eff-org-1923 17 249 = = SYM www-eff-org-1923 17 250 = = NFP www-eff-org-1923 17 251 ” " `` www-eff-org-1923 17 252 Yes yes UH www-eff-org-1923 17 253 ” " '' www-eff-org-1923 17 254 ) ) -RRB- www-eff-org-1923 17 255 Validity validity NN www-eff-org-1923 17 256 in in IN www-eff-org-1923 17 257 general general JJ www-eff-org-1923 17 258       _SP www-eff-org-1923 17 259 More More JJR www-eff-org-1923 17 260 examples example NNS www-eff-org-1923 17 261 of of IN www-eff-org-1923 17 262 the the DT www-eff-org-1923 17 263 dataset dataset NN www-eff-org-1923 17 264 at at IN www-eff-org-1923 17 265 work work NN www-eff-org-1923 17 266 ... ... . www-eff-org-1923 18 1 Which which WDT www-eff-org-1923 18 2 root root NN www-eff-org-1923 18 3 CAs CAs NNP www-eff-org-1923 18 4 created create VBD www-eff-org-1923 18 5 the the DT www-eff-org-1923 18 6 most most RBS www-eff-org-1923 18 7 subordinate subordinate JJ www-eff-org-1923 18 8 CAs ca NNS www-eff-org-1923 18 9 ? ? . www-eff-org-1923 19 1 SubordinateTracking.py subordinatetracking.py CD www-eff-org-1923 19 2 For for IN www-eff-org-1923 19 3 each each DT www-eff-org-1923 19 4 root root NN www-eff-org-1923 19 5 cert cert NN www-eff-org-1923 19 6 : : : www-eff-org-1923 19 7 SELECT SELECT NNP www-eff-org-1923 19 8 certid certid JJ www-eff-org-1923 19 9 , , , www-eff-org-1923 19 10 subject subject NN www-eff-org-1923 19 11 , , , www-eff-org-1923 19 12 issuer issuer NN www-eff-org-1923 19 13 , , , www-eff-org-1923 19 14 ` ` '' www-eff-org-1923 19 15 Subject subject JJ www-eff-org-1923 19 16 Key key NN www-eff-org-1923 19 17 Idenfier idenfier NN www-eff-org-1923 19 18 ` ` '' www-eff-org-1923 19 19 FROM from IN www-eff-org-1923 19 20 valid_certs valid_cert NNS www-eff-org-1923 19 21 where where WRB www-eff-org-1923 19 22 issuer issuer NN www-eff-org-1923 19 23 = = SYM www-eff-org-1923 19 24 < < XX www-eff-org-1923 19 25 root root NN www-eff-org-1923 19 26 CA CA NNP www-eff-org-1923 19 27 's 's POS www-eff-org-1923 19 28 subject subject NN www-eff-org-1923 19 29 > > XX www-eff-org-1923 19 30 and and CC www-eff-org-1923 19 31 locate(”true locate(”true NN www-eff-org-1923 19 32 ” " '' www-eff-org-1923 19 33 , , , www-eff-org-1923 19 34 ` ` '' www-eff-org-1923 19 35 X509v3 X509v3 NNP www-eff-org-1923 19 36 Basic Basic NNP www-eff-org-1923 19 37 Constraints constraint NNS www-eff-org-1923 19 38 : : : www-eff-org-1923 19 39 CA CA NNP www-eff-org-1923 19 40 ` ` '' www-eff-org-1923 19 41 ) ) -RRB- www-eff-org-1923 19 42 and and CC www-eff-org-1923 19 43 ` ` '' www-eff-org-1923 19 44 X509v3 X509v3 NNP www-eff-org-1923 19 45 Authority Authority NNP www-eff-org-1923 19 46 Key Key NNP www-eff-org-1923 19 47 Identifier Identifier NNP www-eff-org-1923 19 48 : : : www-eff-org-1923 19 49 keyid keyid NNP www-eff-org-1923 19 50 ` ` '' www-eff-org-1923 19 51 = = NFP www-eff-org-1923 19 52 < < XX www-eff-org-1923 19 53 root root NN www-eff-org-1923 19 54 CA CA NNP www-eff-org-1923 19 55 's 's POS www-eff-org-1923 19 56 SKID SKID NNP www-eff-org-1923 19 57 > > XX www-eff-org-1923 19 58 ( ( -LRB- www-eff-org-1923 19 59 which which WDT www-eff-org-1923 19 60 may may MD www-eff-org-1923 19 61 be be VB www-eff-org-1923 19 62 NULL NULL NNP www-eff-org-1923 19 63 ) ) -RRB- www-eff-org-1923 19 64 ( ( -LRB- www-eff-org-1923 19 65 and and CC www-eff-org-1923 19 66 recurse recurse VB www-eff-org-1923 19 67 ) ) -RRB- www-eff-org-1923 19 68       _SP www-eff-org-1923 19 69 Results result NNS www-eff-org-1923 19 70 : : : www-eff-org-1923 19 71 top top JJ www-eff-org-1923 19 72 roots root NNS www-eff-org-1923 19 73 by by IN www-eff-org-1923 19 74 CA CA NNP www-eff-org-1923 19 75 proliferation proliferation NN www-eff-org-1923 19 76 1 1 CD www-eff-org-1923 19 77 . . . www-eff-org-1923 20 1 C C NNP www-eff-org-1923 20 2 = = SYM www-eff-org-1923 20 3 DE DE NNP www-eff-org-1923 20 4 , , , www-eff-org-1923 20 5 CN CN NNP www-eff-org-1923 20 6 = = SYM www-eff-org-1923 20 7 Deutsche Deutsche NNP www-eff-org-1923 20 8 Telekom Telekom NNP www-eff-org-1923 20 9 Root Root NNP www-eff-org-1923 20 10 CA CA NNP www-eff-org-1923 20 11 2 2 CD www-eff-org-1923 20 12 252 252 CD www-eff-org-1923 20 13 sub sub NN www-eff-org-1923 20 14 - - HYPH www-eff-org-1923 20 15 CAs ca NNS www-eff-org-1923 20 16 ( ( -LRB- www-eff-org-1923 20 17 4,164 4,164 CD www-eff-org-1923 20 18 leaves leave NNS www-eff-org-1923 20 19 ) ) -RRB- www-eff-org-1923 20 20 2 2 CD www-eff-org-1923 20 21 . . . www-eff-org-1923 21 1 C C NNP www-eff-org-1923 21 2 = = SYM www-eff-org-1923 21 3 US US NNP www-eff-org-1923 21 4 , , , www-eff-org-1923 21 5 CN CN NNP www-eff-org-1923 21 6 = = SYM www-eff-org-1923 21 7 GTE GTE NNP www-eff-org-1923 21 8 CyberTrust CyberTrust NNP www-eff-org-1923 21 9 Global Global NNP www-eff-org-1923 21 10 Root Root NNP www-eff-org-1923 21 11 93 93 CD www-eff-org-1923 21 12 sub sub NN www-eff-org-1923 21 13 - - HYPH www-eff-org-1923 21 14 CAs ca NNS www-eff-org-1923 21 15 ( ( -LRB- www-eff-org-1923 21 16 20,937 20,937 CD www-eff-org-1923 21 17 leaves leave NNS www-eff-org-1923 21 18 ) ) -RRB- www-eff-org-1923 21 19 3 3 CD www-eff-org-1923 21 20 . . . www-eff-org-1923 22 1 C C NNP www-eff-org-1923 22 2 = = SYM www-eff-org-1923 22 3 SE SE NNP www-eff-org-1923 22 4 , , , www-eff-org-1923 22 5 CN CN NNP www-eff-org-1923 22 6 = = SYM www-eff-org-1923 22 7 AddTrust AddTrust NNP www-eff-org-1923 22 8 External External NNP www-eff-org-1923 22 9 CA CA NNP www-eff-org-1923 22 10 Root Root NNP www-eff-org-1923 22 11 72 72 CD www-eff-org-1923 22 12 sub sub NN www-eff-org-1923 22 13 - - HYPH www-eff-org-1923 22 14 CAs ca NNS www-eff-org-1923 22 15 ( ( -LRB- www-eff-org-1923 22 16 384,481 384,481 CD www-eff-org-1923 22 17 leaves leave NNS www-eff-org-1923 22 18 ) ) -RRB- www-eff-org-1923 22 19 4 4 CD www-eff-org-1923 22 20 . . . www-eff-org-1923 23 1 C C NNP www-eff-org-1923 23 2 = = SYM www-eff-org-1923 23 3 BE be VB www-eff-org-1923 23 4 , , , www-eff-org-1923 23 5 CN CN NNP www-eff-org-1923 23 6 = = SYM www-eff-org-1923 23 7 GlobalSign GlobalSign NNP www-eff-org-1923 23 8 Root Root NNP www-eff-org-1923 23 9 CA CA NNP www-eff-org-1923 23 10 63 63 CD www-eff-org-1923 23 11 sub sub NN www-eff-org-1923 23 12 - - HYPH www-eff-org-1923 23 13 CAs ca NNS www-eff-org-1923 23 14 ( ( -LRB- www-eff-org-1923 23 15 140,176 140,176 CD www-eff-org-1923 23 16 leaves leave NNS www-eff-org-1923 23 17 ) ) -RRB- www-eff-org-1923 23 18 5 5 CD www-eff-org-1923 23 19 . . . www-eff-org-1923 24 1 C C NNP www-eff-org-1923 24 2 = = SYM www-eff-org-1923 24 3 US US NNP www-eff-org-1923 24 4 , , , www-eff-org-1923 24 5 CN CN NNP www-eff-org-1923 24 6 = = SYM www-eff-org-1923 24 7 Entrust.net Entrust.net NNP www-eff-org-1923 24 8 Secure Secure NNP www-eff-org-1923 24 9 Server Server NNP www-eff-org-1923 24 10 Certification Certification NNP www-eff-org-1923 24 11 Authority Authority NNP www-eff-org-1923 24 12 33 33 CD www-eff-org-1923 24 13 sub sub NN www-eff-org-1923 24 14 - - HYPH www-eff-org-1923 24 15 CAs ca NNS www-eff-org-1923 24 16 ( ( -LRB- www-eff-org-1923 24 17 91,203 91,203 CD www-eff-org-1923 24 18 leaves leave NNS www-eff-org-1923 24 19 ) ) -RRB- www-eff-org-1923 24 20 6 6 CD www-eff-org-1923 24 21 . . . www-eff-org-1923 25 1 C C NNP www-eff-org-1923 25 2 = = SYM www-eff-org-1923 25 3 FR FR NNP www-eff-org-1923 25 4 , , , www-eff-org-1923 25 5 O o UH www-eff-org-1923 25 6 = = SYM www-eff-org-1923 25 7 PM PM NNP www-eff-org-1923 25 8 / / SYM www-eff-org-1923 25 9 SGDN SGDN NNP www-eff-org-1923 25 10 , , , www-eff-org-1923 25 11 OU OU NNP www-eff-org-1923 25 12 = = SYM www-eff-org-1923 25 13 DCSSI DCSSI NNP www-eff-org-1923 25 14 , , , www-eff-org-1923 25 15 CN CN NNP www-eff-org-1923 25 16 = = SYM www-eff-org-1923 25 17 IGC IGC NNP www-eff-org-1923 25 18 / / SYM www-eff-org-1923 25 19 A A NNP www-eff-org-1923 25 20 ... ... : www-eff-org-1923 25 21 24 24 CD www-eff-org-1923 25 22 sub sub NN www-eff-org-1923 25 23 - - HYPH www-eff-org-1923 25 24 CAs ca NNS www-eff-org-1923 25 25 ( ( -LRB- www-eff-org-1923 25 26 448 448 CD www-eff-org-1923 25 27 leaves leave NNS www-eff-org-1923 25 28 ) ) -RRB- www-eff-org-1923 25 29 7 7 CD www-eff-org-1923 25 30 . . . www-eff-org-1923 26 1 OU OU NNP www-eff-org-1923 26 2 = = SYM www-eff-org-1923 26 3 ValiCert ValiCert NNP www-eff-org-1923 26 4 Class Class NNP www-eff-org-1923 26 5 3 3 CD www-eff-org-1923 26 6 Policy Policy NNP www-eff-org-1923 26 7 Validation Validation NNP www-eff-org-1923 26 8 Authority Authority NNP www-eff-org-1923 26 9 20 20 CD www-eff-org-1923 26 10 sub sub NN www-eff-org-1923 26 11 - - HYPH www-eff-org-1923 26 12 CAs ca NNS www-eff-org-1923 26 13 ( ( -LRB- www-eff-org-1923 26 14 1,273 1,273 CD www-eff-org-1923 26 15 leaves leave NNS www-eff-org-1923 26 16 ) ) -RRB- www-eff-org-1923 26 17 8 8 CD www-eff-org-1923 26 18 . . . www-eff-org-1923 27 1 O o UH www-eff-org-1923 27 2 = = NFP www-eff-org-1923 27 3 VeriSign VeriSign NNP www-eff-org-1923 27 4 , , , www-eff-org-1923 27 5 Inc Inc NNP www-eff-org-1923 27 6 , , , www-eff-org-1923 27 7 OU OU NNP www-eff-org-1923 27 8 = = SYM www-eff-org-1923 27 9 Class Class NNP www-eff-org-1923 27 10 3 3 CD www-eff-org-1923 27 11 Public Public NNP www-eff-org-1923 27 12 Primary Primary NNP www-eff-org-1923 27 13 Certification Certification NNP www-eff-org-1923 27 14 Authority Authority NNP www-eff-org-1923 27 15 18 18 CD www-eff-org-1923 27 16 sub sub NN www-eff-org-1923 27 17 - - HYPH www-eff-org-1923 27 18 CAs ca NNS www-eff-org-1923 27 19 ( ( -LRB- www-eff-org-1923 27 20 312,627 312,627 CD www-eff-org-1923 27 21 leaves leave NNS www-eff-org-1923 27 22 ) ) -RRB- www-eff-org-1923 27 23       _SP www-eff-org-1923 27 24 Great great JJ www-eff-org-1923 27 25 idea idea NN www-eff-org-1923 27 26 : : : www-eff-org-1923 27 27 Certs cert NNS www-eff-org-1923 27 28 become become VB www-eff-org-1923 27 29 reliable reliable JJ www-eff-org-1923 27 30 again again RB www-eff-org-1923 27 31 http://cabforum.org/EV_Certificate_Guidelines.pdf http://cabforum.org/EV_Certificate_Guidelines.pdf NNP www-eff-org-1923 27 32 Stricter Stricter NNP www-eff-org-1923 27 33 rules rule NNS www-eff-org-1923 27 34 like like IN www-eff-org-1923 27 35 : : : www-eff-org-1923 27 36 Owners owner NNS www-eff-org-1923 27 37 exclusively exclusively RB www-eff-org-1923 27 38 own own VBP www-eff-org-1923 27 39 domains domain NNS www-eff-org-1923 27 40 Use use VBP www-eff-org-1923 27 41 relatively relatively RB www-eff-org-1923 27 42 strong strong JJ www-eff-org-1923 27 43 keys key NNS www-eff-org-1923 27 44 Identifiable identifiable JJ www-eff-org-1923 27 45 Owners Owners NNP www-eff-org-1923 27 46 Audits audits NN www-eff-org-1923 27 47 Extended extend VBD www-eff-org-1923 27 48 Validation validation NN www-eff-org-1923 27 49 http://cabforum.org/EV_Certificate_Guidelines.pdf http://cabforum.org/EV_Certificate_Guidelines.pdf NNP www-eff-org-1923 27 50       _SP www-eff-org-1923 27 51 Special special JJ www-eff-org-1923 27 52 OID oid NN www-eff-org-1923 27 53 per per IN www-eff-org-1923 27 54 CA CA NNP www-eff-org-1923 27 55 Chromium Chromium NNP www-eff-org-1923 27 56 Source Source NNP www-eff-org-1923 27 57 documents document NNS www-eff-org-1923 27 58 : : : www-eff-org-1923 27 59 ev_root_ca_metadata.cc ev_root_ca_metadata.cc NNP www-eff-org-1923 27 60 Extended Extended NNP www-eff-org-1923 27 61 Validation Validation NNP www-eff-org-1923 27 62       _SP www-eff-org-1923 27 63 EV EV NNP www-eff-org-1923 27 64 's 's POS www-eff-org-1923 27 65 Per Per NNP www-eff-org-1923 27 66 CA CA NNP www-eff-org-1923 27 67 OIDs oid NNS www-eff-org-1923 27 68       _SP www-eff-org-1923 27 69 EV ev NN www-eff-org-1923 27 70 hints hint NNS www-eff-org-1923 27 71 via via IN www-eff-org-1923 27 72 ugly ugly JJ www-eff-org-1923 27 73 where where WRB www-eff-org-1923 27 74 clause clause NN www-eff-org-1923 27 75 ` ` '' www-eff-org-1923 27 76 X509v3 X509v3 NNP www-eff-org-1923 27 77 Authority Authority NNP www-eff-org-1923 27 78 Key Key NNP www-eff-org-1923 27 79 Identifier Identifier NNP www-eff-org-1923 27 80 ` ` '' www-eff-org-1923 27 81 is be VBZ www-eff-org-1923 27 82 null null JJ www-eff-org-1923 27 83 and and CC www-eff-org-1923 27 84 ( ( -LRB- www-eff-org-1923 27 85 locate("1.2.392.200091.100.721.1 locate("1.2.392.200091.100.721.1 CD www-eff-org-1923 27 86 : : : www-eff-org-1923 27 87 " " `` www-eff-org-1923 27 88 , , , www-eff-org-1923 27 89 ` ` '' www-eff-org-1923 27 90 X509v3 X509v3 NNP www-eff-org-1923 27 91 Certificate Certificate NNP www-eff-org-1923 27 92 Policies policy NNS www-eff-org-1923 27 93 : : : www-eff-org-1923 27 94 Policy policy NN www-eff-org-1923 27 95 ` ` '' www-eff-org-1923 27 96 ) ) -RRB- www-eff-org-1923 27 97 or or CC www-eff-org-1923 27 98 locate("1.3.6.1.4.1.14370.1.6 locate("1.3.6.1.4.1.14370.1.6 NNS www-eff-org-1923 27 99 : : : www-eff-org-1923 27 100 " " `` www-eff-org-1923 27 101 , , , www-eff-org-1923 27 102 ` ` '' www-eff-org-1923 27 103 X509v3 X509v3 NNP www-eff-org-1923 27 104 Certificate Certificate NNP www-eff-org-1923 27 105 Policies policy NNS www-eff-org-1923 27 106 : : : www-eff-org-1923 27 107 Policy policy NN www-eff-org-1923 27 108 ` ` '' www-eff-org-1923 27 109 ) ) -RRB- www-eff-org-1923 27 110 or or CC www-eff-org-1923 27 111 locate("1.3.6.1.4.1.22234.2.5.2.3.1 locate("1.3.6.1.4.1.22234.2.5.2.3.1 NNP www-eff-org-1923 27 112 : : : www-eff-org-1923 27 113 " " `` www-eff-org-1923 27 114 , , , www-eff-org-1923 27 115 ` ` '' www-eff-org-1923 27 116 X509v3 X509v3 NNP www-eff-org-1923 27 117 Certificate Certificate NNP www-eff-org-1923 27 118 Policies policy NNS www-eff-org-1923 27 119 : : : www-eff-org-1923 27 120 Policy policy NN www-eff-org-1923 27 121 ` ` '' www-eff-org-1923 27 122 ) ) -RRB- www-eff-org-1923 27 123 or or CC www-eff-org-1923 27 124 locate("1.3.6.1.4.1.23223.1.1.1 locate("1.3.6.1.4.1.23223.1.1.1 NNP www-eff-org-1923 27 125 : : : www-eff-org-1923 27 126 " " `` www-eff-org-1923 27 127 , , , www-eff-org-1923 27 128 ` ` '' www-eff-org-1923 27 129 X509v3 X509v3 NNP www-eff-org-1923 27 130 Certificate Certificate NNP www-eff-org-1923 27 131 Policies policy NNS www-eff-org-1923 27 132 : : : www-eff-org-1923 27 133 Policy policy NN www-eff-org-1923 27 134 ` ` '' www-eff-org-1923 27 135 ) ) -RRB- www-eff-org-1923 27 136 or or CC www-eff-org-1923 27 137 locate("1.3.6.1.4.1.34697.2.1 locate("1.3.6.1.4.1.34697.2.1 NNS www-eff-org-1923 27 138 : : : www-eff-org-1923 27 139 " " `` www-eff-org-1923 27 140 , , , www-eff-org-1923 27 141 ` ` '' www-eff-org-1923 27 142 X509v3 X509v3 NNP www-eff-org-1923 27 143 Certificate Certificate NNP www-eff-org-1923 27 144 Policies policy NNS www-eff-org-1923 27 145 : : : www-eff-org-1923 27 146 Policy policy NN www-eff-org-1923 27 147 ` ` '' www-eff-org-1923 27 148 ) ) -RRB- www-eff-org-1923 27 149 or or CC www-eff-org-1923 27 150 locate("1.3.6.1.4.1.34697.2.2 locate("1.3.6.1.4.1.34697.2.2 NNP www-eff-org-1923 27 151 : : : www-eff-org-1923 27 152 " " '' www-eff-org-1923 27 153 , , , www-eff-org-1923 27 154 ` ` '' www-eff-org-1923 27 155 X509v3 X509v3 NNP www-eff-org-1923 27 156 Certificate Certificate NNP www-eff-org-1923 27 157 Policies policy NNS www-eff-org-1923 27 158 : : : www-eff-org-1923 27 159 Policy policy NN www-eff-org-1923 27 160 ` ` '' www-eff-org-1923 27 161 ) ) -RRB- www-eff-org-1923 27 162 or or CC www-eff-org-1923 27 163 locate("1.3.6.1.4.1.34697.2.3 locate("1.3.6.1.4.1.34697.2.3 VBZ www-eff-org-1923 27 164 : : : www-eff-org-1923 27 165 " " `` www-eff-org-1923 27 166 , , , www-eff-org-1923 27 167 ` ` '' www-eff-org-1923 27 168 X509v3 X509v3 NNP www-eff-org-1923 27 169 Certificate Certificate NNP www-eff-org-1923 27 170 Policies policy NNS www-eff-org-1923 27 171 : : : www-eff-org-1923 27 172 Policy policy NN www-eff-org-1923 27 173 ` ` '' www-eff-org-1923 27 174 ) ) -RRB- www-eff-org-1923 27 175 or or CC www-eff-org-1923 27 176 locate("1.3.6.1.4.1.34697.2.4 locate("1.3.6.1.4.1.34697.2.4 NN www-eff-org-1923 27 177 : : : www-eff-org-1923 27 178 " " '' www-eff-org-1923 27 179 , , , www-eff-org-1923 27 180 ` ` '' www-eff-org-1923 27 181 X509v3 X509v3 NNP www-eff-org-1923 27 182 Certificate Certificate NNP www-eff-org-1923 27 183 Policies policy NNS www-eff-org-1923 27 184 : : : www-eff-org-1923 27 185 Policy policy NN www-eff-org-1923 27 186 ` ` '' www-eff-org-1923 27 187 ) ) -RRB- www-eff-org-1923 27 188 or or CC www-eff-org-1923 27 189 locate("1.3.6.1.4.1.4146.1.1 locate("1.3.6.1.4.1.4146.1.1 NNPS www-eff-org-1923 27 190 : : : www-eff-org-1923 27 191 " " '' www-eff-org-1923 27 192 , , , www-eff-org-1923 27 193 ` ` '' www-eff-org-1923 27 194 X509v3 X509v3 NNP www-eff-org-1923 27 195 Certificate Certificate NNP www-eff-org-1923 27 196 Policies policy NNS www-eff-org-1923 27 197 : : : www-eff-org-1923 27 198 Policy policy NN www-eff-org-1923 27 199 ` ` '' www-eff-org-1923 27 200 ) ) -RRB- www-eff-org-1923 27 201 or or CC www-eff-org-1923 27 202 locate("1.3.6.1.4.1.6334.1.100.1 locate("1.3.6.1.4.1.6334.1.100.1 NN www-eff-org-1923 27 203 : : : www-eff-org-1923 27 204 " " `` www-eff-org-1923 27 205 , , , www-eff-org-1923 27 206 ` ` '' www-eff-org-1923 27 207 X509v3 X509v3 NNP www-eff-org-1923 27 208 Certificate Certificate NNP www-eff-org-1923 27 209 Policies policy NNS www-eff-org-1923 27 210 : : : www-eff-org-1923 27 211 Policy policy NN www-eff-org-1923 27 212 ` ` '' www-eff-org-1923 27 213 ) ) -RRB- www-eff-org-1923 27 214 or or CC www-eff-org-1923 27 215 locate("1.3.6.1.4.1.6449.1.2.1.5.1 locate("1.3.6.1.4.1.6449.1.2.1.5.1 XX www-eff-org-1923 27 216 : : : www-eff-org-1923 27 217 " " `` www-eff-org-1923 27 218 , , , www-eff-org-1923 27 219 ` ` '' www-eff-org-1923 27 220 X509v3 X509v3 NNP www-eff-org-1923 27 221 Certificate Certificate NNP www-eff-org-1923 27 222 Policies policy NNS www-eff-org-1923 27 223 : : : www-eff-org-1923 27 224 Policy policy NN www-eff-org-1923 27 225 ` ` '' www-eff-org-1923 27 226 ) ) -RRB- www-eff-org-1923 27 227 or or CC www-eff-org-1923 27 228 locate("1.3.6.1.4.1.782.1.2.1.8.1 locate("1.3.6.1.4.1.782.1.2.1.8.1 JJ www-eff-org-1923 27 229 : : : www-eff-org-1923 27 230 " " `` www-eff-org-1923 27 231 , , , www-eff-org-1923 27 232 ` ` '' www-eff-org-1923 27 233 X509v3 X509v3 NNP www-eff-org-1923 27 234 Certificate Certificate NNP www-eff-org-1923 27 235 Policies policy NNS www-eff-org-1923 27 236 : : : www-eff-org-1923 27 237 Policy policy NN www-eff-org-1923 27 238 ` ` '' www-eff-org-1923 27 239 ) ) -RRB- www-eff-org-1923 27 240 or or CC www-eff-org-1923 27 241 locate("1.3.6.1.4.1.8024.0.2.100.1.2 locate("1.3.6.1.4.1.8024.0.2.100.1.2 NN www-eff-org-1923 27 242 : : : www-eff-org-1923 27 243 " " `` www-eff-org-1923 27 244 , , , www-eff-org-1923 27 245 ` ` '' www-eff-org-1923 27 246 X509v3 X509v3 NNP www-eff-org-1923 27 247 Certificate Certificate NNP www-eff-org-1923 27 248 Policies policy NNS www-eff-org-1923 27 249 : : : www-eff-org-1923 27 250 Policy policy NN www-eff-org-1923 27 251 ` ` '' www-eff-org-1923 27 252 ) ) -RRB- www-eff-org-1923 27 253 or or CC www-eff-org-1923 27 254 locate("2.16.528.1.1001.1.1.1.12.6.1.1.1:",`X509v3 locate("2.16.528.1.1001.1.1.1.12.6.1.1.1:",`X509v3 NNP www-eff-org-1923 27 255 Certificate Certificate NNP www-eff-org-1923 27 256 Policies Policies NNPS www-eff-org-1923 27 257 : : : www-eff-org-1923 27 258 Policy`)or policy`)or NN www-eff-org-1923 27 259 locate("2.16.756.1.89.1.2.1.1 locate("2.16.756.1.89.1.2.1.1 NNS www-eff-org-1923 27 260 : : : www-eff-org-1923 27 261 " " `` www-eff-org-1923 27 262 , , , www-eff-org-1923 27 263 ` ` '' www-eff-org-1923 27 264 X509v3 X509v3 NNP www-eff-org-1923 27 265 Certificate Certificate NNP www-eff-org-1923 27 266 Policies policy NNS www-eff-org-1923 27 267 : : : www-eff-org-1923 27 268 Policy policy NN www-eff-org-1923 27 269 ` ` '' www-eff-org-1923 27 270 ) ) -RRB- www-eff-org-1923 27 271 or or CC www-eff-org-1923 27 272 locate("2.16.840.1.113733.1.7.23.6 locate("2.16.840.1.113733.1.7.23.6 VB www-eff-org-1923 27 273 : : : www-eff-org-1923 27 274 " " `` www-eff-org-1923 27 275 , , , www-eff-org-1923 27 276 ` ` '' www-eff-org-1923 27 277 X509v3 X509v3 NNP www-eff-org-1923 27 278 Certificate Certificate NNP www-eff-org-1923 27 279 Policies policy NNS www-eff-org-1923 27 280 : : : www-eff-org-1923 27 281 Policy policy NN www-eff-org-1923 27 282 ` ` '' www-eff-org-1923 27 283 ) ) -RRB- www-eff-org-1923 27 284 or or CC www-eff-org-1923 27 285 locate("2.16.840.1.113733.1.7.48.1 locate("2.16.840.1.113733.1.7.48.1 NNP www-eff-org-1923 27 286 : : : www-eff-org-1923 27 287 " " `` www-eff-org-1923 27 288 , , , www-eff-org-1923 27 289 ` ` '' www-eff-org-1923 27 290 X509v3 X509v3 NNP www-eff-org-1923 27 291 Certificate Certificate NNP www-eff-org-1923 27 292 Policies policy NNS www-eff-org-1923 27 293 : : : www-eff-org-1923 27 294 Policy policy NN www-eff-org-1923 27 295 ` ` '' www-eff-org-1923 27 296 ) ) -RRB- www-eff-org-1923 27 297 or or CC www-eff-org-1923 27 298 locate("2.16.840.1.114028.10.1.2 locate("2.16.840.1.114028.10.1.2 NN www-eff-org-1923 27 299 : : : www-eff-org-1923 27 300 " " `` www-eff-org-1923 27 301 , , , www-eff-org-1923 27 302 ` ` '' www-eff-org-1923 27 303 X509v3 X509v3 NNP www-eff-org-1923 27 304 Certificate Certificate NNP www-eff-org-1923 27 305 Policies policy NNS www-eff-org-1923 27 306 : : : www-eff-org-1923 27 307 Policy policy NN www-eff-org-1923 27 308 ` ` '' www-eff-org-1923 27 309 ) ) -RRB- www-eff-org-1923 27 310 or or CC www-eff-org-1923 27 311 locate("2.16.840.1.114171.500.9 locate("2.16.840.1.114171.500.9 LS www-eff-org-1923 27 312 : : : www-eff-org-1923 27 313 " " `` www-eff-org-1923 27 314 , , , www-eff-org-1923 27 315 ` ` '' www-eff-org-1923 27 316 X509v3 X509v3 NNP www-eff-org-1923 27 317 Certificate Certificate NNP www-eff-org-1923 27 318 Policies policy NNS www-eff-org-1923 27 319 : : : www-eff-org-1923 27 320 Policy policy NN www-eff-org-1923 27 321 ` ` '' www-eff-org-1923 27 322 ) ) -RRB- www-eff-org-1923 27 323 or or CC www-eff-org-1923 27 324 locate("2.16.840.1.114404.1.1.2.4.1 locate("2.16.840.1.114404.1.1.2.4.1 NN www-eff-org-1923 27 325 : : : www-eff-org-1923 27 326 " " `` www-eff-org-1923 27 327 , , , www-eff-org-1923 27 328 ` ` '' www-eff-org-1923 27 329 X509v3 X509v3 NNP www-eff-org-1923 27 330 Certificate Certificate NNP www-eff-org-1923 27 331 Policies policy NNS www-eff-org-1923 27 332 : : : www-eff-org-1923 27 333 Policy policy NN www-eff-org-1923 27 334 ` ` '' www-eff-org-1923 27 335 ) ) -RRB- www-eff-org-1923 27 336 or or CC www-eff-org-1923 27 337 locate("2.16.840.1.114412.2.1 locate("2.16.840.1.114412.2.1 NN www-eff-org-1923 27 338 : : : www-eff-org-1923 27 339 " " '' www-eff-org-1923 27 340 , , , www-eff-org-1923 27 341 ` ` '' www-eff-org-1923 27 342 X509v3 X509v3 NNP www-eff-org-1923 27 343 Certificate Certificate NNP www-eff-org-1923 27 344 Policies policy NNS www-eff-org-1923 27 345 : : : www-eff-org-1923 27 346 Policy policy NN www-eff-org-1923 27 347 ` ` '' www-eff-org-1923 27 348 ) ) -RRB- www-eff-org-1923 27 349 or or CC www-eff-org-1923 27 350 locate("2.16.840.1.114413.1.7.23.3 locate("2.16.840.1.114413.1.7.23.3 NNP www-eff-org-1923 27 351 : : : www-eff-org-1923 27 352 " " `` www-eff-org-1923 27 353 , , , www-eff-org-1923 27 354 ` ` '' www-eff-org-1923 27 355 X509v3 X509v3 NNP www-eff-org-1923 27 356 Certificate Certificate NNP www-eff-org-1923 27 357 Policies policy NNS www-eff-org-1923 27 358 : : : www-eff-org-1923 27 359 Policy policy NN www-eff-org-1923 27 360 ` ` '' www-eff-org-1923 27 361 ) ) -RRB- www-eff-org-1923 27 362 or or CC www-eff-org-1923 27 363 locate("2.16.840.1.114414.1.7.23.3 locate("2.16.840.1.114414.1.7.23.3 RB www-eff-org-1923 27 364 : : : www-eff-org-1923 27 365 " " `` www-eff-org-1923 27 366 , , , www-eff-org-1923 27 367 ` ` '' www-eff-org-1923 27 368 X509v3 X509v3 NNP www-eff-org-1923 27 369 Certificate Certificate NNP www-eff-org-1923 27 370 Policies policy NNS www-eff-org-1923 27 371 : : : www-eff-org-1923 27 372 Policy policy NN www-eff-org-1923 27 373 ` ` '' www-eff-org-1923 27 374 ) ) -RRB- www-eff-org-1923 27 375 ) ) -RRB- www-eff-org-1923 27 376       _SP www-eff-org-1923 27 377 Extended extend VBN www-eff-org-1923 27 378 Validation Validation NNP www-eff-org-1923 27 379 Problems problem NNS www-eff-org-1923 27 380 in in IN www-eff-org-1923 27 381 general general JJ www-eff-org-1923 27 382 Browser Browser NNP www-eff-org-1923 27 383 SOP SOP NNP www-eff-org-1923 27 384 not not RB www-eff-org-1923 27 385 super super RB www-eff-org-1923 27 386 compatible compatible JJ www-eff-org-1923 27 387 Same same JJ www-eff-org-1923 27 388 CAs CAs NNP www-eff-org-1923 27 389 Accountability Accountability NNP www-eff-org-1923 27 390 & & CC www-eff-org-1923 27 391 Auditing Auditing NNP www-eff-org-1923 27 392 ? ? . www-eff-org-1923 28 1 Certificate Certificate NNP www-eff-org-1923 28 2 Policy Policy NNP www-eff-org-1923 28 3 Statements Statements NNPS www-eff-org-1923 28 4 7,239 7,239 CD www-eff-org-1923 28 5 served serve VBD www-eff-org-1923 28 6 over over RP www-eff-org-1923 28 7 http http NNS www-eff-org-1923 28 8 not not RB www-eff-org-1923 28 9 a a DT www-eff-org-1923 28 10 violation violation NN www-eff-org-1923 28 11       _SP www-eff-org-1923 28 12 Finding find VBG www-eff-org-1923 28 13 EV EV NNP www-eff-org-1923 28 14 problems problem NNS www-eff-org-1923 28 15 with with IN www-eff-org-1923 28 16 the the DT www-eff-org-1923 28 17 Observatory observatory JJ www-eff-org-1923 28 18 About about RB www-eff-org-1923 28 19 33,916 33,916 CD www-eff-org-1923 28 20 EV EV NNP www-eff-org-1923 28 21 certs cert NNS www-eff-org-1923 28 22 this this DT www-eff-org-1923 28 23 time time NN www-eff-org-1923 28 24 with with IN www-eff-org-1923 28 25 38 38 CD www-eff-org-1923 28 26 issuers issuer NNS www-eff-org-1923 28 27 Not not RB www-eff-org-1923 28 28 all all DT www-eff-org-1923 28 29 unique unique JJ www-eff-org-1923 28 30 , , , www-eff-org-1923 28 31 not not RB www-eff-org-1923 28 32 all all DT www-eff-org-1923 28 33 really really RB www-eff-org-1923 28 34 used use VBN www-eff-org-1923 28 35 . . . www-eff-org-1923 29 1 Extended extend VBN www-eff-org-1923 29 2 Validation validation NN www-eff-org-1923 29 3 problems problem NNS www-eff-org-1923 29 4 found find VBN www-eff-org-1923 29 5 by by IN www-eff-org-1923 29 6 the the DT www-eff-org-1923 29 7 Observatory Observatory NNP www-eff-org-1923 29 8 RFC-1918 RFC-1918 NNPS www-eff-org-1923 29 9 Addreses Addreses NNPS www-eff-org-1923 29 10 Unqualified Unqualified NNP www-eff-org-1923 29 11 Names Names NNPS www-eff-org-1923 29 12 ... ... : www-eff-org-1923 30 1 Localhost Localhost NNP www-eff-org-1923 30 2 ? ? . www-eff-org-1923 30 3 ! ! . www-eff-org-1923 30 4 ? ? . www-eff-org-1923 31 1 Weak weak JJ www-eff-org-1923 31 2 keys key NNS www-eff-org-1923 31 3 Long long JJ www-eff-org-1923 31 4 expiration expiration NN www-eff-org-1923 31 5       _SP www-eff-org-1923 31 6 EV EV NNP www-eff-org-1923 31 7 crypto crypto NN www-eff-org-1923 31 8 policy policy NN www-eff-org-1923 31 9 violations violation NNS www-eff-org-1923 31 10 13 13 CD www-eff-org-1923 31 11 Issuers issuer NNS www-eff-org-1923 31 12 signed sign VBD www-eff-org-1923 31 13 127 127 CD www-eff-org-1923 31 14 valid valid JJ www-eff-org-1923 31 15 , , , www-eff-org-1923 31 16 EV EV NNP www-eff-org-1923 31 17 certs cert NNS www-eff-org-1923 31 18 with with IN www-eff-org-1923 31 19 1024 1024 CD www-eff-org-1923 31 20 bit bit NN www-eff-org-1923 31 21 RSA rsa NN www-eff-org-1923 31 22 keys key NNS www-eff-org-1923 31 23 that that WDT www-eff-org-1923 31 24 expire expire VBP www-eff-org-1923 31 25 after after IN www-eff-org-1923 31 26 Dec Dec NNP www-eff-org-1923 31 27 31 31 CD www-eff-org-1923 31 28 , , , www-eff-org-1923 31 29 2010 2010 CD www-eff-org-1923 31 30 But but CC www-eff-org-1923 31 31 ” " '' www-eff-org-1923 31 32 Subscriber Subscriber NNP www-eff-org-1923 31 33 Certificates Certificates NNPS www-eff-org-1923 31 34 whose whose WP$ www-eff-org-1923 31 35 validity validity NN www-eff-org-1923 31 36 period period NN www-eff-org-1923 31 37 ends end VBZ www-eff-org-1923 31 38 after after IN www-eff-org-1923 31 39 31 31 CD www-eff-org-1923 31 40 Dec Dec NNP www-eff-org-1923 31 41 2010 2010 CD www-eff-org-1923 31 42 ” " '' www-eff-org-1923 31 43 must must MD www-eff-org-1923 31 44 be be VB www-eff-org-1923 31 45 2048 2048 CD www-eff-org-1923 31 46 bits bit NNS www-eff-org-1923 31 47       _SP www-eff-org-1923 31 48 Finding find VBG www-eff-org-1923 31 49 EV EV NNP www-eff-org-1923 31 50 problems problem NNS www-eff-org-1923 31 51 with with IN www-eff-org-1923 31 52 the the DT www-eff-org-1923 31 53 Observatory Observatory NNP www-eff-org-1923 31 54 Wildcard Wildcard NNP www-eff-org-1923 31 55 certs cert VBZ www-eff-org-1923 31 56 for for IN www-eff-org-1923 31 57 * * NFP www-eff-org-1923 31 58 .domain.com .domain.com NFP www-eff-org-1923 31 59 are be VBP www-eff-org-1923 31 60 not not RB www-eff-org-1923 31 61 allowed allow VBN www-eff-org-1923 31 62 in in IN www-eff-org-1923 31 63 EV EV NNP www-eff-org-1923 31 64 certs cert NNS www-eff-org-1923 31 65 . . . www-eff-org-1923 32 1 2 2 CD www-eff-org-1923 32 2 Cybertrust Cybertrust NNP www-eff-org-1923 32 3 certs cert NNS www-eff-org-1923 32 4 : : : www-eff-org-1923 32 5 * * NFP www-eff-org-1923 32 6 .xlgroup.com .xlgroup.com NFP www-eff-org-1923 32 7 * * NFP www-eff-org-1923 32 8 .amos.hosting.accenture.com .amos.hosting.accenture.com . www-eff-org-1923 32 9       _SP www-eff-org-1923 32 10 EV EV NNP www-eff-org-1923 32 11 certs cert NNS www-eff-org-1923 32 12 for for IN www-eff-org-1923 32 13 unqualified unqualified JJ www-eff-org-1923 32 14 names name NNS www-eff-org-1923 32 15 Still still RB www-eff-org-1923 32 16 observe observe VBP www-eff-org-1923 32 17 EV ev NN www-eff-org-1923 32 18 certs cert NNS www-eff-org-1923 32 19 for for IN www-eff-org-1923 32 20 : : : www-eff-org-1923 32 21 ” " `` www-eff-org-1923 32 22 webmail webmail NNP www-eff-org-1923 32 23 ” " '' www-eff-org-1923 32 24 , , , www-eff-org-1923 32 25 ” " `` www-eff-org-1923 32 26 zinc zinc NN www-eff-org-1923 32 27 ” " '' www-eff-org-1923 32 28 , , , www-eff-org-1923 32 29 ” " '' www-eff-org-1923 32 30 localhost”1 localhost”1 NFP www-eff-org-1923 32 31 Major Major NNP www-eff-org-1923 32 32 Class Class NNP www-eff-org-1923 32 33 3 3 CD www-eff-org-1923 32 34 EV EV NNP www-eff-org-1923 32 35 CAs ca NNS www-eff-org-1923 32 36 like like IN www-eff-org-1923 32 37 Verisign Verisign NNP www-eff-org-1923 32 38 1(revoked 1(revoke VBD www-eff-org-1923 32 39 after after IN www-eff-org-1923 32 40 DEFCON DEFCON NNP www-eff-org-1923 32 41 ) ) -RRB- www-eff-org-1923 32 42       _SP www-eff-org-1923 32 43 EV ev NN www-eff-org-1923 32 44 certs cert NNS www-eff-org-1923 32 45 for for IN www-eff-org-1923 32 46 private private JJ www-eff-org-1923 32 47 IPs ip NNS www-eff-org-1923 32 48 GlobalSign GlobalSign NNP www-eff-org-1923 32 49 Signed sign VBD www-eff-org-1923 32 50 an an DT www-eff-org-1923 32 51 EV EV NNP www-eff-org-1923 32 52 cert cert NN www-eff-org-1923 32 53 with with IN www-eff-org-1923 32 54 a a DT www-eff-org-1923 32 55 name name NN www-eff-org-1923 32 56 for for IN www-eff-org-1923 32 57 an an DT www-eff-org-1923 32 58 RFC RFC NNP www-eff-org-1923 32 59 1918 1918 CD www-eff-org-1923 32 60 IP IP NNP www-eff-org-1923 32 61 – – : www-eff-org-1923 32 62 i.e. i.e. FW www-eff-org-1923 33 1 192.168.x.x 192.168.x.x CD www-eff-org-1923 33 2 Said say VBD www-eff-org-1923 33 3 they -PRON- PRP www-eff-org-1923 33 4 changed change VBD www-eff-org-1923 33 5 policy policy NN www-eff-org-1923 33 6 in in IN www-eff-org-1923 33 7 2009 2009 CD www-eff-org-1923 33 8 & & CC www-eff-org-1923 33 9 audited audit VBD www-eff-org-1923 33 10 . . . www-eff-org-1923 34 1 Last last JJ www-eff-org-1923 34 2 summer summer NN www-eff-org-1923 34 3 we -PRON- PRP www-eff-org-1923 34 4 found find VBD www-eff-org-1923 34 5 one one CD www-eff-org-1923 34 6 they -PRON- PRP www-eff-org-1923 34 7 missed miss VBD www-eff-org-1923 34 8 , , , www-eff-org-1923 34 9 and and CC www-eff-org-1923 34 10 we -PRON- PRP www-eff-org-1923 34 11 just just RB www-eff-org-1923 34 12 noticed notice VBD www-eff-org-1923 34 13 another another DT www-eff-org-1923 34 14 ... ... : www-eff-org-1923 34 15       _SP www-eff-org-1923 34 16 EV ev NN www-eff-org-1923 34 17 certs cert NNS www-eff-org-1923 34 18 for for IN www-eff-org-1923 34 19 private private JJ www-eff-org-1923 34 20 IPs ip NNS www-eff-org-1923 34 21 ... ... : www-eff-org-1923 34 22 https://giftcard.ilcusys.com/ https://giftcard.ilcusys.com/ DT www-eff-org-1923 34 23 ICUL ICUL NNP www-eff-org-1923 34 24 Service Service NNP www-eff-org-1923 34 25 Corporation Corporation NNP www-eff-org-1923 34 26 , , , www-eff-org-1923 34 27 " " `` www-eff-org-1923 34 28 Helping Helping NNP www-eff-org-1923 34 29 Credit Credit NNP www-eff-org-1923 34 30 Unions Unions NNPS www-eff-org-1923 34 31 Compete Compete NNP www-eff-org-1923 34 32 " " '' www-eff-org-1923 34 33 , , , www-eff-org-1923 34 34 Illinois Illinois NNP www-eff-org-1923 34 35 Credit Credit NNP www-eff-org-1923 34 36 Union Union NNP www-eff-org-1923 34 37 League League NNP www-eff-org-1923 34 38 ... ... : www-eff-org-1923 34 39 With with IN www-eff-org-1923 34 40 a a DT www-eff-org-1923 34 41 " " `` www-eff-org-1923 34 42 McAfee McAfee NNP www-eff-org-1923 34 43 Secure Secure NNP www-eff-org-1923 34 44 " " '' www-eff-org-1923 34 45 badge badge NN www-eff-org-1923 34 46 . . . www-eff-org-1923 35 1 https://giftcard.ilcusys.com/ https://giftcard.ilcusys.com/ NNP www-eff-org-1923 35 2       _SP www-eff-org-1923 35 3 EV EV NNP www-eff-org-1923 35 4 certs cert NNS www-eff-org-1923 35 5 for for IN www-eff-org-1923 35 6 private private JJ www-eff-org-1923 35 7 IPs ips JJ www-eff-org-1923 35 8       _SP www-eff-org-1923 35 9 512 512 CD www-eff-org-1923 35 10 bit bit NN www-eff-org-1923 35 11 EV ev NN www-eff-org-1923 35 12 cert cert NN www-eff-org-1923 35 13 ( ( -LRB- www-eff-org-1923 35 14 ! ! . www-eff-org-1923 35 15 ! ! . www-eff-org-1923 35 16 ! ! . www-eff-org-1923 35 17 ) ) -RRB- www-eff-org-1923 36 1 https://suppliers.tnb.com https://suppliers.tnb.com NNP www-eff-org-1923 36 2 Thomas Thomas NNP www-eff-org-1923 36 3 & & CC www-eff-org-1923 36 4 Betts Betts NNP www-eff-org-1923 36 5 Corporation Corporation NNP www-eff-org-1923 36 6 of of IN www-eff-org-1923 36 7 Memphis Memphis NNP www-eff-org-1923 36 8 TN TN NNP www-eff-org-1923 36 9 Convinced convince VBD www-eff-org-1923 36 10 a a DT www-eff-org-1923 36 11 CA CA NNP www-eff-org-1923 36 12 to to TO www-eff-org-1923 36 13 give give VB www-eff-org-1923 36 14 them -PRON- PRP www-eff-org-1923 36 15 a a DT www-eff-org-1923 36 16 512 512 CD www-eff-org-1923 36 17 bit bit NN www-eff-org-1923 36 18 RSA rsa NN www-eff-org-1923 36 19 cert cert NN www-eff-org-1923 36 20 in in IN www-eff-org-1923 36 21 September September NNP www-eff-org-1923 36 22 ... ... : www-eff-org-1923 36 23 it -PRON- PRP www-eff-org-1923 36 24 expires expire VBZ www-eff-org-1923 36 25 in in IN www-eff-org-1923 36 26 2012 2012 CD www-eff-org-1923 36 27 . . . www-eff-org-1923 37 1 Finding find VBG www-eff-org-1923 37 2 the the DT www-eff-org-1923 37 3 512 512 CD www-eff-org-1923 37 4 bit bit NN www-eff-org-1923 37 5 EV EV NNP www-eff-org-1923 37 6 cert cert NN www-eff-org-1923 37 7       _SP www-eff-org-1923 37 8 512 512 CD www-eff-org-1923 37 9 bit bit NN www-eff-org-1923 37 10 EV ev NN www-eff-org-1923 37 11 cert cert NN www-eff-org-1923 37 12       _SP www-eff-org-1923 37 13 Future Future NNP www-eff-org-1923 37 14 Work Work NNP www-eff-org-1923 37 15 1 1 CD www-eff-org-1923 37 16 . . . www-eff-org-1923 38 1 Release Release NNP www-eff-org-1923 38 2 revised revise VBD www-eff-org-1923 38 3 and and CC www-eff-org-1923 38 4 neater neater JJ www-eff-org-1923 38 5 datasets dataset VBZ www-eff-org-1923 38 6 2 2 CD www-eff-org-1923 38 7 . . . www-eff-org-1923 39 1 A a DT www-eff-org-1923 39 2 decentralised decentralise VBN www-eff-org-1923 39 3 observatory observatory JJ www-eff-org-1923 39 4       _SP www-eff-org-1923 39 5 Decentralised Decentralised NNP www-eff-org-1923 39 6 Observatory Observatory NNP www-eff-org-1923 39 7 Objectives Objectives NNP www-eff-org-1923 39 8 1 1 CD www-eff-org-1923 39 9 . . . www-eff-org-1923 40 1 Detect detect JJ www-eff-org-1923 40 2 MITM MITM NNP www-eff-org-1923 40 3 attacks attack NNS www-eff-org-1923 40 4   VBP www-eff-org-1923 40 5 even even RB www-eff-org-1923 40 6 if if IN www-eff-org-1923 40 7 only only RB www-eff-org-1923 40 8 the the DT www-eff-org-1923 40 9 victim victim NN www-eff-org-1923 40 10 gets get VBZ www-eff-org-1923 40 11 the the DT www-eff-org-1923 40 12 cert cert NN www-eff-org-1923 40 13 2 2 CD www-eff-org-1923 40 14 . . . www-eff-org-1923 41 1 Protect protect VB www-eff-org-1923 41 2 user user NN www-eff-org-1923 41 3 privacy privacy NN www-eff-org-1923 41 4   NNP www-eff-org-1923 41 5 never never RB www-eff-org-1923 41 6 know know VBP www-eff-org-1923 41 7 who who WP www-eff-org-1923 41 8 looks look VBZ www-eff-org-1923 41 9 at at IN www-eff-org-1923 41 10 which which WDT www-eff-org-1923 41 11 site site NN www-eff-org-1923 41 12       _SP www-eff-org-1923 41 13 Decentralised Decentralised NNP www-eff-org-1923 41 14 Observatory Observatory NNP www-eff-org-1923 41 15 Design Design NNP www-eff-org-1923 41 16 1 1 CD www-eff-org-1923 41 17 . . . www-eff-org-1923 42 1 User User NNP www-eff-org-1923 42 2 has have VBZ www-eff-org-1923 42 3 Tor Tor VBN www-eff-org-1923 42 4 running running NN www-eff-org-1923 42 5   NNP www-eff-org-1923 42 6 but but CC www-eff-org-1923 42 7 not not RB www-eff-org-1923 42 8 currently currently RB www-eff-org-1923 42 9 in in IN www-eff-org-1923 42 10 use use NN www-eff-org-1923 42 11 2 2 CD www-eff-org-1923 42 12 . . . www-eff-org-1923 43 1 Send send VB www-eff-org-1923 43 2 raw raw JJ www-eff-org-1923 43 3 certs cert NNS www-eff-org-1923 43 4 to to IN www-eff-org-1923 43 5 Observatory Observatory NNP www-eff-org-1923 43 6   RB www-eff-org-1923 43 7 asynchronosly asynchronosly RB www-eff-org-1923 43 8   VBP www-eff-org-1923 43 9 via via IN www-eff-org-1923 43 10 Tor Tor NNP www-eff-org-1923 43 11 for for IN www-eff-org-1923 43 12 anonymity anonymity NN www-eff-org-1923 43 13 3 3 CD www-eff-org-1923 43 14 . . . www-eff-org-1923 44 1 Warn warn VB www-eff-org-1923 44 2 users user NNS www-eff-org-1923 44 3 about about IN www-eff-org-1923 44 4 phishy phishy JJ www-eff-org-1923 44 5 CA CA NNP www-eff-org-1923 44 6 signatures signature NNS www-eff-org-1923 44 7 ? ? . www-eff-org-1923 45 1   NNP www-eff-org-1923 45 2 maybe maybe RB www-eff-org-1923 45 3 not not RB www-eff-org-1923 45 4 until until IN www-eff-org-1923 45 5 a a DT www-eff-org-1923 45 6 few few JJ www-eff-org-1923 45 7 seconds second NNS www-eff-org-1923 45 8 later later RB www-eff-org-1923 45 9 :( :( NFP www-eff-org-1923 45 10   NNP www-eff-org-1923 45 11 better well RBR www-eff-org-1923 45 12 late late RB www-eff-org-1923 45 13 than than IN www-eff-org-1923 45 14 never never RB www-eff-org-1923 45 15       _SP www-eff-org-1923 45 16 Decentralised Decentralised NNP www-eff-org-1923 45 17 Observatory Observatory NNP www-eff-org-1923 45 18 the the DT www-eff-org-1923 45 19 code code NN www-eff-org-1923 45 20 is be VBZ www-eff-org-1923 45 21 in in IN www-eff-org-1923 45 22 progress progress NN www-eff-org-1923 45 23       _SP www-eff-org-1923 45 24 Conclusion Conclusion NNP www-eff-org-1923 45 25 join join VB www-eff-org-1923 45 26 us -PRON- PRP www-eff-org-1923 45 27 eff.org/observatory eff.org/observatory NNP www-eff-org-1923 45 28 questions question NNS www-eff-org-1923 45 29 : : : www-eff-org-1923 45 30 ssl-survey@eff.org ssl-survey@eff.org NNP www-eff-org-1923 45 31 Slide slide NN www-eff-org-1923 45 32 1 1 CD www-eff-org-1923 45 33 Slide slide NN www-eff-org-1923 45 34 2 2 CD www-eff-org-1923 45 35 Slide slide NN www-eff-org-1923 45 36 3 3 CD www-eff-org-1923 45 37 Slide slide NN www-eff-org-1923 45 38 4 4 CD www-eff-org-1923 45 39 Slide slide NN www-eff-org-1923 45 40 5 5 CD www-eff-org-1923 45 41 Slide slide NN www-eff-org-1923 45 42 6 6 CD www-eff-org-1923 45 43 Slide slide NN www-eff-org-1923 45 44 7 7 CD www-eff-org-1923 45 45 Slide slide NN www-eff-org-1923 45 46 8 8 CD www-eff-org-1923 45 47 Slide slide NN www-eff-org-1923 45 48 9 9 CD www-eff-org-1923 45 49 Slide slide NN www-eff-org-1923 45 50 10 10 CD www-eff-org-1923 45 51 Slide slide NN www-eff-org-1923 45 52 11 11 CD www-eff-org-1923 45 53 Slide slide NN www-eff-org-1923 45 54 12 12 CD www-eff-org-1923 45 55 Slide slide NN www-eff-org-1923 45 56 13 13 CD www-eff-org-1923 45 57 Slide slide NN www-eff-org-1923 45 58 14 14 CD www-eff-org-1923 45 59 Slide slide NN www-eff-org-1923 45 60 15 15 CD www-eff-org-1923 45 61 Slide slide NN www-eff-org-1923 45 62 16 16 CD www-eff-org-1923 45 63 Slide slide NN www-eff-org-1923 45 64 17 17 CD www-eff-org-1923 45 65 Slide slide NN www-eff-org-1923 45 66 18 18 CD www-eff-org-1923 45 67 Slide slide NN www-eff-org-1923 45 68 19 19 CD www-eff-org-1923 45 69 Slide slide NN www-eff-org-1923 45 70 20 20 CD www-eff-org-1923 45 71 Slide slide NN www-eff-org-1923 45 72 21 21 CD www-eff-org-1923 45 73 Slide slide NN www-eff-org-1923 45 74 22 22 CD www-eff-org-1923 45 75 Slide slide NN www-eff-org-1923 45 76 23 23 CD www-eff-org-1923 45 77 Slide slide NN www-eff-org-1923 45 78 24 24 CD www-eff-org-1923 45 79 Slide slide NN www-eff-org-1923 45 80 25 25 CD www-eff-org-1923 45 81 Slide slide NN www-eff-org-1923 45 82 26 26 CD www-eff-org-1923 45 83 Slide slide NN www-eff-org-1923 45 84 27 27 CD www-eff-org-1923 45 85 Slide slide NN www-eff-org-1923 45 86 28 28 CD www-eff-org-1923 45 87 Slide slide NN www-eff-org-1923 45 88 29 29 CD www-eff-org-1923 45 89 Slide slide NN www-eff-org-1923 45 90 30 30 CD www-eff-org-1923 45 91 Slide slide NN www-eff-org-1923 45 92 31 31 CD www-eff-org-1923 45 93 Slide slide NN www-eff-org-1923 45 94 32 32 CD www-eff-org-1923 45 95 Slide slide NN www-eff-org-1923 45 96 33 33 CD www-eff-org-1923 45 97 Slide slide NN www-eff-org-1923 45 98 34 34 CD www-eff-org-1923 45 99 Slide slide NN www-eff-org-1923 45 100 35 35 CD www-eff-org-1923 45 101 Slide slide NN www-eff-org-1923 45 102 36 36 CD www-eff-org-1923 45 103 Slide slide NN www-eff-org-1923 45 104 37 37 CD www-eff-org-1923 45 105 Slide slide NN www-eff-org-1923 45 106 38 38 CD www-eff-org-1923 45 107 Slide slide NN www-eff-org-1923 45 108 39 39 CD www-eff-org-1923 45 109 Slide slide NN www-eff-org-1923 45 110 40 40 CD www-eff-org-1923 45 111 Slide slide NN www-eff-org-1923 45 112 41 41 CD www-eff-org-1923 45 113 Slide slide NN www-eff-org-1923 45 114 42 42 CD www-eff-org-1923 45 115 Slide slide NN www-eff-org-1923 45 116 43 43 CD www-eff-org-1923 45 117 Slide slide NN www-eff-org-1923 45 118 44 44 CD www-eff-org-1923 45 119 Slide slide NN www-eff-org-1923 45 120 45 45 CD www-eff-org-1923 45 121 Slide slide NN www-eff-org-1923 45 122 46 46 CD www-eff-org-1923 45 123 Slide slide NN www-eff-org-1923 45 124 47 47 CD www-eff-org-1923 45 125 Slide Slide NNP www-eff-org-1923 45 126 48 48 CD www-eff-org-1923 45 127 Slide slide NN www-eff-org-1923 45 128 49 49 CD www-eff-org-1923 45 129 Slide slide NN www-eff-org-1923 45 130 50 50 CD www-eff-org-1923 45 131 Slide Slide NNP www-eff-org-1923 45 132 51 51 CD www-eff-org-1923 45 133 Slide slide NN www-eff-org-1923 45 134 52 52 CD www-eff-org-1923 45 135 Slide slide NN www-eff-org-1923 45 136 53 53 CD www-eff-org-1923 45 137 Slide slide NN www-eff-org-1923 45 138 54 54 CD www-eff-org-1923 45 139 Slide slide NN www-eff-org-1923 45 140 55 55 CD www-eff-org-1923 45 141 Slide slide NN www-eff-org-1923 45 142 56 56 CD