Collected research

Bamboozling Certificate Authorities with BGP

Henry Birge-Lee, Yixin Sun, Anne Edmundson, Jennifer Rexford and Prateek Mittal · usenix.org

An autonomous system can hijack BGP routes to a victim domain just long enough to answer a certificate authority domain validation check and obtain a valid certificate for a domain it does not control. The authors demonstrate this against real top CAs, measure 1.8 million certificates, and propose multiple vantage point validation and BGP monitoring.

Record

Researcher

Henry Birge-Lee, Yixin Sun, Anne Edmundson, Jennifer Rexford and Prateek Mittal

Published by

usenix.org

Topic

Crypto

In the archive

• Collected in the 2018 research round

Related sources

• USENIX Security '18 - Bamboozling Certificate Authorities with BGP

Tags

• tls
• https
• auth-bypass
• dns
• measurement-study
• large-scale-scan
• mitigation
• owasp-a01-2021
• owasp-a02-2021

This page is the archive's own catalogue record. The research is the work of Henry Birge-Lee, Yixin Sun, Anne Edmundson, Jennifer Rexford and Prateek Mittal, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.