{"id":"https://openalex.org/W4286255710","doi":"https://doi.org/10.56553/popets-2022-0075","title":"SoK: SCT Auditing in Certificate Transparency","display_name":"SoK: SCT Auditing in Certificate Transparency","publication_year":2022,"publication_date":"2022-07-01","ids":{"openalex":"https://openalex.org/W4286255710","doi":"https://doi.org/10.56553/popets-2022-0075"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2022-0075","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2022-0075","pdf_url":"https://petsymposium.org/popets/2022/popets-2022-0075.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2022/popets-2022-0075.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038294203","display_name":"Sarah Meiklejohn","orcid":"https://orcid.org/0000-0002-2108-8975"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sarah Meiklejohn","raw_affiliation_strings":["Google LLC","Google LLC, {meiklejohn, jdeblasio,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google LLC","institution_ids":["https://openalex.org/I1291425158"]},{"raw_affiliation_string":"Google LLC, {meiklejohn, jdeblasio,","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032008716","display_name":"Joe DeBlasio","orcid":null},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joe DeBlasio","raw_affiliation_strings":["Google LLC","Google LLC, {meiklejohn, jdeblasio,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google LLC","institution_ids":["https://openalex.org/I1291425158"]},{"raw_affiliation_string":"Google LLC, {meiklejohn, jdeblasio,","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031040224","display_name":"Devon O\u2019Brien","orcid":null},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Devon O\u2019Brien","raw_affiliation_strings":["Google LLC","Google LLC, {meiklejohn, jdeblasio,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google LLC","institution_ids":["https://openalex.org/I1291425158"]},{"raw_affiliation_string":"Google LLC, {meiklejohn, jdeblasio,","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108549496","display_name":"Chris Thompson","orcid":null},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chris Thompson","raw_affiliation_strings":["Google LLC","Google LLC, {meiklejohn, jdeblasio,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google LLC","institution_ids":["https://openalex.org/I1291425158"]},{"raw_affiliation_string":"Google LLC, {meiklejohn, jdeblasio,","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112543699","display_name":"Kevin Yeo","orcid":"https://orcid.org/0009-0009-4997-6307"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kevin Yeo","raw_affiliation_strings":["Google LLC","Google LLC, {meiklejohn, jdeblasio,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google LLC","institution_ids":["https://openalex.org/I1291425158"]},{"raw_affiliation_string":"Google LLC, {meiklejohn, jdeblasio,","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064558932","display_name":"Emily Stark","orcid":null},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Emily Stark","raw_affiliation_strings":["Google LLC","Google LLC, {meiklejohn, jdeblasio,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google LLC","institution_ids":["https://openalex.org/I1291425158"]},{"raw_affiliation_string":"Google LLC, {meiklejohn, jdeblasio,","institution_ids":["https://openalex.org/I1291425158"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1291425158"],"apc_list":null,"apc_paid":null,"fwci":0.9185,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.78352012,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"2022","issue":"3","first_page":"336","last_page":"353"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/certificate","display_name":"Certificate","score":0.7442337870597839},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.720854640007019},{"id":"https://openalex.org/keywords/transparency","display_name":"Transparency (behavior)","score":0.7196303606033325},{"id":"https://openalex.org/keywords/certificate-authority","display_name":"Certificate authority","score":0.6727819442749023},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.6593049168586731},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.6503443121910095},{"id":"https://openalex.org/keywords/public-key-certificate","display_name":"Public key certificate","score":0.5926159620285034},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5785086154937744},{"id":"https://openalex.org/keywords/public-key-infrastructure","display_name":"Public key infrastructure","score":0.5517999529838562},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5240398049354553},{"id":"https://openalex.org/keywords/authorization-certificate","display_name":"Authorization certificate","score":0.5055227279663086},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4590313732624054},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.4399672746658325},{"id":"https://openalex.org/keywords/parallels","display_name":"Parallels","score":0.43969354033470154},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.4359697699546814},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.42341357469558716},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.409213662147522},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3191385865211487},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.17153990268707275},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.10474255681037903},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08894479274749756}],"concepts":[{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.7442337870597839},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.720854640007019},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.7196303606033325},{"id":"https://openalex.org/C93636275","wikidata":"https://www.wikidata.org/wiki/Q196776","display_name":"Certificate authority","level":4,"score":0.6727819442749023},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.6593049168586731},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6503443121910095},{"id":"https://openalex.org/C167529545","wikidata":"https://www.wikidata.org/wiki/Q274758","display_name":"Public key certificate","level":4,"score":0.5926159620285034},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5785086154937744},{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.5517999529838562},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5240398049354553},{"id":"https://openalex.org/C175093008","wikidata":"https://www.wikidata.org/wiki/Q758251","display_name":"Authorization certificate","level":5,"score":0.5055227279663086},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4590313732624054},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.4399672746658325},{"id":"https://openalex.org/C2775922551","wikidata":"https://www.wikidata.org/wiki/Q7135033","display_name":"Parallels","level":2,"score":0.43969354033470154},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.4359697699546814},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.42341357469558716},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.409213662147522},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3191385865211487},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.17153990268707275},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.10474255681037903},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08894479274749756},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.56553/popets-2022-0075","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2022-0075","pdf_url":"https://petsymposium.org/popets/2022/popets-2022-0075.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.56553/popets-2022-0075","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2022-0075","pdf_url":"https://petsymposium.org/popets/2022/popets-2022-0075.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4286255710.pdf","grobid_xml":"https://content.openalex.org/works/W4286255710.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W1484798037","https://openalex.org/W1504028050","https://openalex.org/W1515945955","https://openalex.org/W2008251338","https://openalex.org/W2019016802","https://openalex.org/W2146752727","https://openalex.org/W2222747815","https://openalex.org/W2463495559","https://openalex.org/W2528103924","https://openalex.org/W2588121565","https://openalex.org/W2605460060","https://openalex.org/W2634547503","https://openalex.org/W2733681384","https://openalex.org/W2792818501","https://openalex.org/W2902352019","https://openalex.org/W2918752259","https://openalex.org/W2965442679","https://openalex.org/W2969419280","https://openalex.org/W2987263720","https://openalex.org/W3016862388","https://openalex.org/W3025291910","https://openalex.org/W3044183949","https://openalex.org/W3098142495","https://openalex.org/W3158598426","https://openalex.org/W4233819588","https://openalex.org/W6676734387","https://openalex.org/W6740744476","https://openalex.org/W6762798472","https://openalex.org/W6765546916","https://openalex.org/W6806495394"],"related_works":["https://openalex.org/W2376373997","https://openalex.org/W2188945435","https://openalex.org/W2994213367","https://openalex.org/W2369694906","https://openalex.org/W1612032142","https://openalex.org/W1574475986","https://openalex.org/W2181703223","https://openalex.org/W4240158903","https://openalex.org/W3091805520","https://openalex.org/W3169018135"],"abstract_inverted_index":{"The":[0,48],"Web":[1],"public":[2,59],"key":[3,192],"infrastructure":[4],"is":[5,52,80],"essential":[6],"to":[7,42,53,202],"providing":[8],"secure":[9],"communication":[10],"on":[11,155,208],"the":[12,43,67,74,91,107,122,127,142,171,203,209,220],"Internet":[13],"today,":[14],"and":[15,124,159,214],"certificate":[16,79,123,152],"authorities":[17,29],"play":[18],"a":[19,77,116,131,162,181,212,215,224],"crucial":[20],"role":[21],"in":[22,58,82,112,161,194],"this":[23,138],"ecosystem":[24],"by":[25,180],"issuing":[26],"certificates.":[27,72],"These":[28],"may":[30],"misissue":[31],"certificates":[32,57,108,230],"or":[33],"suffer":[34],"misuse":[35],"attacks,":[36],"however,":[37,99],"which":[38,61],"has":[39],"given":[40,78],"rise":[41],"Certificate":[44],"Transparency":[45],"(CT)":[46],"project.":[47],"goal":[49],"of":[50,69,86,93,118,133,151,183,222],"CT":[51],"store":[54],"all":[55],"issued":[56],"logs,":[60,113],"can":[62],"then":[63],"be":[64],"checked":[65],"for":[66,130,148],"presence":[68],"potentially":[70],"misissued":[71],"Thus,":[73],"requirement":[75],"that":[76,106,134,144,185,205,231],"indeed":[81],"one":[83],"(or":[84],"several)":[85],"these":[87],"logs":[88],"lies":[89],"at":[90],"core":[92],"CT.":[94],"In":[95,137,165],"its":[96],"current":[97],"deployment,":[98],"most":[100],"individual":[101],"clients":[102],"do":[103],"not":[104],"check":[105],"they":[109,206],"see":[110],"are":[111,232],"as":[114],"requesting":[115],"proof":[117],"inclusion":[119],"directly":[120],"reveals":[121],"thus":[125],"creates":[126],"clear":[128],"potential":[129],"violation":[132],"client\u2019s":[135],"privacy.":[136],"paper,":[139],"we":[140,168,186,188],"explore":[141,170],"techniques":[143],"have":[145],"been":[146],"proposed":[147],"privacy-preserving":[149],"auditing":[150],"inclusion,":[153],"focusing":[154],"their":[156,199],"effectiveness,":[157],"efficiency,":[158],"suitability":[160],"near-term":[163],"deployment.":[164],"doing":[166],"so,":[167],"also":[169],"parallels":[172],"with":[173],"related":[174],"problems":[175],"involving":[176],"browser":[177],"clients.":[178],"Guided":[179],"set":[182],"constraints":[184],"develop,":[187],"ultimately":[189],"observe":[190],"several":[191],"limitations":[193],"many":[195],"proposals,":[196],"ranging":[197],"from":[198],"privacy":[200],"provisions":[201],"fact":[204],"focus":[207],"interaction":[210],"between":[211],"client":[213,225],"log":[216],"but":[217],"leave":[218],"open":[219],"question":[221],"how":[223],"could":[226],"privately":[227],"report":[228],"any":[229],"missing.":[233]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}