hpkp and hsts. global analysis and implementation
TRANSCRIPT
![Page 1: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/1.jpg)
![Page 2: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/2.jpg)
![Page 3: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/3.jpg)
![Page 4: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/4.jpg)
![Page 5: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/5.jpg)
![Page 6: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/6.jpg)
![Page 7: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/7.jpg)
![Page 8: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/8.jpg)
33827
9723
5794 4717 7305
2957 1230
0
5000
10000
15000
20000
25000
30000
35000
40000
Strict-Transport-Protocol IncludeSubDomains preload Full implement (OnlyHTTPS)
HSTS implemented in Alexa
HTTPS HTTP
![Page 9: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/9.jpg)
![Page 10: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/10.jpg)
89
211
71 58
17 2 2
0
50
100
150
200
250
Domains using HPKP pins: 450
Number of pins offered by top million Alexa domains
1 2 3 [4,6] [7,9] [10,12] >=13
![Page 11: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/11.jpg)
17%
74%
9%
Pinned certificates in the trust chain for the top million Alexa domains using HPKP
Root Intermediate Leaf
![Page 12: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/12.jpg)
2,76% 2,49%
25,14%
31,77%
5,52%
11,60%
20,72%
0,00%
5,00%
10,00%
15,00%
20,00%
25,00%
30,00%
35,00%
86400 604800 2592000 5184000 15768000 31536000 Others
Perc
enta
ge o
f d
om
ain
s
HPKP max-age value
Most used max-age values for HPKP
![Page 13: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/13.jpg)
![Page 14: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/14.jpg)
6,26%
0,01%
6,10% 4,78%
43,98%
24,60%
14,29%
0,00%
5,00%
10,00%
15,00%
20,00%
25,00%
30,00%
35,00%
40,00%
45,00%
50,00%
0 432 15552000 15768000 31536000 63072000 Others
Perc
enta
ge o
f d
om
ain
s
HSTS max-age value
Most used max-age values for HSTS
![Page 15: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/15.jpg)
o
o
o
o
5794
2056
662
0
1000
2000
3000
4000
5000
6000
7000
Preloading status in Alexa's top 1M domains
Include preload header (https) Preloaded (Chromium list) Preloaded with errors
![Page 16: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/16.jpg)
0,04%
0,25%
0,75%
7,62%
32,00%
59,45%
0,00% 10,00% 20,00% 30,00% 40,00% 50,00% 60,00% 70,00%
Errors classification in domains
Other invalid_cert_chain www_first
preload_missing max_age_too_low include_sub_domains_missing
![Page 18: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/18.jpg)
![Page 19: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/19.jpg)
![Page 20: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/20.jpg)
![Page 21: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/21.jpg)
![Page 22: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/22.jpg)
![Page 23: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/23.jpg)
![Page 24: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/24.jpg)
![Page 25: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/25.jpg)
![Page 26: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/26.jpg)
![Page 27: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/27.jpg)
![Page 28: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/28.jpg)
![Page 29: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/29.jpg)
![Page 30: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/30.jpg)
![Page 31: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/31.jpg)
![Page 33: HPKP and HSTS. Global analysis and implementation](https://reader034.vdocuments.mx/reader034/viewer/2022050613/589980e11a28abb97c8b52b3/html5/thumbnails/33.jpg)