Work at CITP Making Direct Impact on Your Computer - Featured on the Google Security Blog: "New Security Requirements Adopted by HTTPS Certificate Industry"

April 1, 2025

After demonstrating and exposing a major security loophole in the PKI (public key infrastructure), CITP researchers worked to design what is now known as Multi-Perspective Issuance Corroboration (MPIC). The discovery of the critical security vulnerability led to a major technical and policy reform resulting in the Certificate Authority / Browser Forum Ballot, which requires adoption of MPIC via Ballot SC-067. Google Security Blog outlines the collaboration and significance of this project in a recent blog post. The team includes Prateek Mittal, Jennifer Rexford, Henry Birge-Lee, Grace Cimaszewski, Liang Wang, Mihir Kshirsagar, and Cyrill Krähenbühl of Princeton University + Ryan Dickson and Chris Clements of Google Chrome. This has also been featured on Techspot this week

News Category
Digital Infrastructure & Platforms
Privacy & Security