Related Work

Explore our latest publications and research findings in the field of BGP security and MPIC implementations.

Bamboozling Certificate Authorities with BGP

Henry Birge-Lee, Yixin Sun, Anne Edmundson, Jennifer Rexford, and Prateek Mittal, Princeton University

This paper shows how BGP attacks let adversaries obtain bogus certificates, demonstrates real-world exploits against top CAs, reveals widespread vulnerabilities across 1.8 million certificates, and proposes securing PKI with multi-vantage-point verification and BGP monitoring.

Published: 2018

Experiences Deploying Multi-Vantage-Point Domain Validation at Let's Encrypt

Henry Birge-Lee and Liang Wang, Princeton University; Daniel McCarney, Square Inc.; Roland Shoemaker, unaffiliated; Jennifer Rexford and Prateek Mittal, Princeton University

This paper evaluates the operational impact of deploying multi-vantage-point domain validation at Let's Encrypt, and uses a novel simulation framework to analyze its effectiveness in mitigating BGP attacks.

Published: 2021

How Effective is Multiple-Vantage-Point Domain Control Validation?

Grace H. Cimaszewski, Henry Birge-Lee, Liang Wang, Jennifer Rexford, and Prateek Mittal, Princeton University

Building on our prior work that introduced multi-vantage-point domain validation (multiVA) and evaluated its real-world deployment at Let's Encrypt, this paper takes the next step by rigorously quantifying its security under real-world routing conditions, identifying remaining attack surfaces, and exploring how to further strengthen multiVA resilience through strategic deployment adjustments.

Published: 2023