arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1612.03005cs.CRcs.NI
收藏

没有留下任何领域:Let's Encrypt正在使加密民主化?

No domain left behind: is Let's Encrypt democratizing encryption?

Maarten Aertsen, Maciej Korczyński, Giovane C. M. Moura, Samaneh Tajalizadehkhoob, Jan van den Berg

摘要:

2013年美国国家安全局(National Security Agency)披露的无处不在的监控导致了整个计算机和互联网行业的“加密热潮”。为了抵制大规模监控并保护用户隐私,供应商、托管和云提供商已经在其硬件、通信链路和应用程序上广泛部署了加密。因此,现在大部分的网络流量都是加密的。然而,仍然有相当一部分互联网流量没有加密。有人认为,与获得和部署X.509证书相关的成本和复杂性是广泛加密的主要障碍,因为这些证书是建立加密连接所必需的。为了解决这些问题,电子前沿基金会、Mozilla基金会和密歇根大学成立了Let's Encrypt(LE),这是一个提供免费X.509证书和自动部署这些证书的软件的证书颁发机构。在本文中,我们调查了LE是否成功地实现了加密的民主化:我们分析了LE第一年的证书颁发情况,并从各个角度表明LE的采用率呈上升趋势,实际上它成功地覆盖了托管市场的低成本端。

英文摘要:

The 2013 National Security Agency revelations of pervasive monitoring have lead to an "encryption rush" across the computer and Internet industry. To push back against massive surveillance and protect users privacy, vendors, hosting and cloud providers have widely deployed encryption on their hardware, communication links, and applications. As a consequence, the most of web traffic nowadays is encrypted. However, there is still a significant part of Internet traffic that is not encrypted. It has been argued that both costs and complexity associated with obtaining and deploying X.509 certificates are major barriers for widespread encryption, since these certificates are required to established encrypted connections. To address these issues, the Electronic Frontier Foundation, Mozilla Foundation, and the University of Michigan have set up Let's Encrypt (LE), a certificate authority that provides both free X.509 certificates and software that automates the deployment of these certificates. In this paper, we investigate if LE has been successful in democratizing encryption: we analyze certificate issuance in the first year of LE and show from various perspectives that LE adoption has an upward trend and it is in fact being successful in covering the lower-cost end of the hosting market.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑