Towards Practical, End-to-End Formally Verified X.509 Certificate Validators with Verdict
No ratings
Presented at USENIX Security 2025 by
Validating X.509 certificates is a critical part of Internet security, but the relevant standards are complex and ambiguous. Most X.509 validators also intentionally deviate from these standards in idiosyncratic ways, often for security or backward compatibility. Unsurprisingly, the result is a long history of security vulnerabilities.