NetSec Lecture Series: Tracking the deployment of TLS 1.3 on the Web

Beschreibung

Die Fachgruppe Sicherheit in Mobil- und Festnetzen veranstaltet in diesem Sommersemester die virtuelle NetSec Lecture Series. Die zweite Veranstaltung findet am 19. Mai 2022 von 17:00 - 18:30 Uhr statt. Die Zoom-Einwahldaten für die Veranstaltung sind: https://tu-berlin.zoom.us/j/63223549564?pwd=SUdRSjcvVzJJeVhielM0UE5pNGhlQT09.

Save-the-date: NetSec Lecture Series

• 19. Mai 2022: Jens Hiller (RWTH Aachen)
  Tracking the deployment of TLS 1.3 on the Web: A story of experimentation and centralization
• 15. Juni 2022: Prof. Dr. Andreas Peter, Universität Oldenburg
  DEEPCASE: Semi-Supervised Contextual Analysis of Security Events

Am 19. Mai 2022 findet der zweite Vortrag der NetSec Lecture Series statt. Jens Hiller von der RWTH Aachen wird über die Verbreitung von TLS 1.3 im Internet sprechen.

Tracking the deployment of TLS 1.3 on the Web: A story of experimentation and centralization

Abstract: Transport Layer Security is the most important security protocol on the Web. Before the standardization of its newest version TLS 1.3 in August 2018, the protocol was redesigned over four years in a yet unprecedented design process that involved many cryptographers and key industry stakeholders. Based on the combination of active Internet scans, and passive measurements in large networks and on Android devices, we will look at how large stakeholders experimented with the protocol in the Internet well before its standardization. Their experiments uncovered incompatibilities that influenced the ongoing standardization process. Also, we will analyze the uptake of this mission-critical security protocol after its standardization. In contrast to TLS 1.2, where adoption took more than five years and was prompted by severe attacks on previous versions, TLS 1.3 is deployed surprisingly speedily. The design process thus provides valuable information for future protocol design and deployment.

CV: Jens Hiller is Researcher and PhD Student at the Chair of Communication and Distributed Systems (COMSYS) at RWTH Aachen University. His research interests revolve around today's prominent secure communication protocols and security and privacy for the Internet of Things. He also spent two summer research stays at the International Computer Science Institute (ICSI) in Berkely analyzing the security of the Web's Internet Public Key Infrastructure.

Vergangene Veranstaltungen der NetSec Lecture Series:

• 21. April 2022: Dr. Robin Sommer (ICSI/Corelight)
  Transition To Practice, They Say:
  How Two Decades of Security Research Ultimately Spawned a Silicon Valley Startup