Decentralised domain authentication. (13th May 2022)

• Record Type: Journal Article
• Authors: Nayazi, Shehyaaz Khan; Aman, Mohammed Sufiyan; Pandey, Shakshi; Agrawal, Riyanchhi; Namratha, M.
• Is Part Of: International journal of blockchains and cryptocurrencies. Volume 3:Number 1(2022)
• Page Start: 24
• Page End: 40
• Publication Date: 2022-05-13
• Subjects: certificate transparency -- online certificate transparency protocol -- OCSP -- signed certificate timestamp -- SCT -- blockchain -- smart contract -- transport layer security -- instant karma PKI -- IKP -- decentralised domain authentication; Blockchains (Databases) -- Periodicals; Cryptocurrencies -- Periodicals; Electronic funds transfers -- Periodicals; 332.404
• Languages: English
• ISSNs: 2516-6425

Abstract

Transport layer security protocols ensure secure and encrypted communications on the internet. The security of TLS protocols relies on properly validating digital certificates containing the public keys of domains during the handshake authentication. These certificates are issued by certificate authorities (CAs). However, mis-issued certificates have been used to attack users. To monitor CA behaviour, certificate transparency (CT) and a decentralised system, instant karma public key infrastructure (IKP) were proposed, however, they do not tackle domain misbehaviour. Based on CT and IKP, a decentralised system is proposed using the Ethereum framework to handle the misbehaviour of domains and enhance the security of TLS. The proposed system utilises CT logs to detect and respond to domain misbehaviour.