Time For A Better Web Of Trust?

DEFCON 19 -- Las Vegas -- The Web of trust created by secure socket layer (SSL) certificates has fundamental problems that carry over into the secure extensions of the domain name system, security researcher Moxie Marlinspike told attendees at the DefCon hacking convention on Friday.

Because software that uses SSL encryption relies on companies whose authority to sign certificates cannot easily be revoked, the technology does not provide the agility to respond to events, such as the breach of certificate authority Comodo earlier this year, Marlinspike said. The security extensions to the domain name system (DNSSEC), which places certificates in the DNS record for added security, have greater problems because you cannot revoke the authority of the root provider, he argued.

"This system actually provides reduced trust agility," Marlinspike told attendees. "Today I can still choose to remove Verisign from the list of trusted certificate authorities in my browser, but there is nothing I can do to stop Verisign from managing the .com and .net lookups."

Marlinspike proposed a system of collective trust, dubbed Convergence, that solves these issues. Instead of certificate authorities, the system uses notary servers that check that the same certificate is returned for a domain lookup from disparate network and geographical locations, which eliminates the risk of a man-in-the-middle attack, he said.

The technology, which Marlinspike implemented as a Firefox plug-in, obeys two tenets of the researchers' idea of trust agility that SSL certificates do not: First, the decision to trust a particular organization should not be permanent. If the organization proves untrustworthy in the future, then a user should be able to revoke the organizations trust.

"There are plenty of organizations that I trust today to secure my transactions for me," Marlinspike said. "But what is insane [with SSL] is that I must identify an organization, or a set of organizations, that I'm willing to trust not just now, but forever."

The second part of trust agility is to empower the user to change his mind about trusting an organization in the future. Currently, about 650 organizations can sign certificates -- including governments in China and Korea -- allowing them to potentially eavesdrop on secure transactions, according to the Electronic Frontier Foundation.

"In this increasingly globalized world, it doesn't seem really possible to make one trust decision for everybody," Marlinspike says. "There are different people with different contexts and different threats."

Currently, there are very few notaries that support the Convergence system. But anyone can establish one, and users can set their thresholds for the number of notaries to poll and how many notaries must agree to validate the identity of a Web site.

To date, there are two functional issues: Sites that sign different servers for the same domain name, such as banks, do not resolve correctly. In addition, neither do captive portals -- frequently used in pay-for-use WiFi networks.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.