Conference Papers Year : 2024

Web Content Integrity: Tamper-Proof Websites Beyond HTTPS

Abstract

We propose Web Content Integrity, a framework that allows a service provider to guarantee the integrity of their static website, even in the face of a compromised web server. Such integrity assurances can then be used to implement a secure end-to-end encryption application built in the form of a website. Our framework encompasses developers, the Domain Name System, and web browsers. To accomplish the integrity guarantees, our framework makes use of an index of queryable URLs and allowed redirects for the website, and publishes the cryptographic hash value of the index in the DNS. Web browsers can then use the information from the DNS to verify that the resources they retrieve from the web server have not been tampered with. The required data structures can be generated automatically, and the framework introduces an initial delay of about 4 ms and a recurring delay for each request of about 2 ms for a sample website.

Keywords

Embargoed file
Embargoed file
1 10 10
Year Month Jours
Avant la publication
Friday, January 1, 2027
Embargoed file
Friday, January 1, 2027
Please log in to request access to the document

Dates and versions

hal-04953437 , version 1 (18-02-2025)

Licence

Identifiers

Cite

Sven Zemanek, Sebastian Tauchert, Max Jens Ufer, Lilli Bruckschen. Web Content Integrity: Tamper-Proof Websites Beyond HTTPS. 38th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2023, Poznan, Poland. pp.1-14, ⟨10.1007/978-3-031-56326-3_1⟩. ⟨hal-04953437⟩
0 View
0 Download

Altmetric

Share

More