{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:5F2MNRK3XJNKUOVZWETYR3HK2S","short_pith_number":"pith:5F2MNRK3","canonical_record":{"source":{"id":"2605.31020","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-29T08:53:24Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"bcc7dbc4b6337ec895d0e8f77e9c015ee2dd62bb57f30004351a1a1abf1c85af","abstract_canon_sha256":"ad69594c06bf54cf2361d6876cc6861348d7d018f825c463f4b488aa1d7fccf6"},"schema_version":"1.0"},"canonical_sha256":"e974c6c55bba5aaa3ab9b12788ecead480898af26d70942aa32491553726d743","source":{"kind":"arxiv","id":"2605.31020","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.31020","created_at":"2026-06-01T01:03:31Z"},{"alias_kind":"arxiv_version","alias_value":"2605.31020v1","created_at":"2026-06-01T01:03:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.31020","created_at":"2026-06-01T01:03:31Z"},{"alias_kind":"pith_short_12","alias_value":"5F2MNRK3XJNK","created_at":"2026-06-01T01:03:31Z"},{"alias_kind":"pith_short_16","alias_value":"5F2MNRK3XJNKUOVZ","created_at":"2026-06-01T01:03:31Z"},{"alias_kind":"pith_short_8","alias_value":"5F2MNRK3","created_at":"2026-06-01T01:03:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:5F2MNRK3XJNKUOVZWETYR3HK2S","target":"record","payload":{"canonical_record":{"source":{"id":"2605.31020","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-29T08:53:24Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"bcc7dbc4b6337ec895d0e8f77e9c015ee2dd62bb57f30004351a1a1abf1c85af","abstract_canon_sha256":"ad69594c06bf54cf2361d6876cc6861348d7d018f825c463f4b488aa1d7fccf6"},"schema_version":"1.0"},"canonical_sha256":"e974c6c55bba5aaa3ab9b12788ecead480898af26d70942aa32491553726d743","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-01T01:03:31.082565Z","signature_b64":"f5C7IUXdJpY3j/uu+JVA4+j6WTbs8pRzzhGPHc2LPfous2s6bCVz167CrZaaB8bsf+iDagz3zVcB/QANcmUGBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e974c6c55bba5aaa3ab9b12788ecead480898af26d70942aa32491553726d743","last_reissued_at":"2026-06-01T01:03:31.081570Z","signature_status":"signed_v1","first_computed_at":"2026-06-01T01:03:31.081570Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.31020","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-01T01:03:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4SDd+eb6kYzBqR96JyA2a8uv6pfN3gEHALOsynydp4bIwGJsrj3lFpYxCg07+7wez7s2BZJuo2nxsGqsANwRBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-08T22:16:50.668100Z"},"content_sha256":"60484f28c1d3ba58d19b00d374e98bb573f865e9b4ecd9adcad075cd85f00a31","schema_version":"1.0","event_id":"sha256:60484f28c1d3ba58d19b00d374e98bb573f865e9b4ecd9adcad075cd85f00a31"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:5F2MNRK3XJNKUOVZWETYR3HK2S","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Thou Shall Not Pass: Gatekeeping Outbound TLS Connections","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.NI"],"primary_cat":"cs.CR","authors_text":"Domenico Siracusa, Henrique B. Brum, Luis A. Dias Knob, Matteo Franzil, Riccardo Germenia, Salvatore Manfredi","submitted_at":"2026-05-29T08:53:24Z","abstract_excerpt":"Despite the widespread use of Transport Layer Security (TLS), its security guarantees are frequently compromised by outdated versions and misconfigurations. To analyze this problem, we collected more than 50 million TLS handshakes over a two-week period at our research institution, Fondazione Bruno Kessler, and analyzed three server-selected parameters against the recommendations of four TLS guidelines. Our analysis shows that while the use of insecure or outdated options is minimal, it remains persistent. More importantly, servers are adopting the latest TLS advancements much faster than offi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.31020","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.31020/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-01T01:03:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N+LIdwxy8fozwO07SxppkwbzetPreH5KcI9aIqhPZcycUP63TJvh3QFE4lgESatF35nJAsSgm0BRcQEzBQYGAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-08T22:16:50.668491Z"},"content_sha256":"ca58fa24b8d8861e932a6621a510a43b51e764d3c4f0b0e42eae723ed26f81f7","schema_version":"1.0","event_id":"sha256:ca58fa24b8d8861e932a6621a510a43b51e764d3c4f0b0e42eae723ed26f81f7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5F2MNRK3XJNKUOVZWETYR3HK2S/bundle.json","state_url":"https://pith.science/pith/5F2MNRK3XJNKUOVZWETYR3HK2S/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5F2MNRK3XJNKUOVZWETYR3HK2S/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-08T22:16:50Z","links":{"resolver":"https://pith.science/pith/5F2MNRK3XJNKUOVZWETYR3HK2S","bundle":"https://pith.science/pith/5F2MNRK3XJNKUOVZWETYR3HK2S/bundle.json","state":"https://pith.science/pith/5F2MNRK3XJNKUOVZWETYR3HK2S/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5F2MNRK3XJNKUOVZWETYR3HK2S/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:5F2MNRK3XJNKUOVZWETYR3HK2S","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ad69594c06bf54cf2361d6876cc6861348d7d018f825c463f4b488aa1d7fccf6","cross_cats_sorted":["cs.NI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-29T08:53:24Z","title_canon_sha256":"bcc7dbc4b6337ec895d0e8f77e9c015ee2dd62bb57f30004351a1a1abf1c85af"},"schema_version":"1.0","source":{"id":"2605.31020","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.31020","created_at":"2026-06-01T01:03:31Z"},{"alias_kind":"arxiv_version","alias_value":"2605.31020v1","created_at":"2026-06-01T01:03:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.31020","created_at":"2026-06-01T01:03:31Z"},{"alias_kind":"pith_short_12","alias_value":"5F2MNRK3XJNK","created_at":"2026-06-01T01:03:31Z"},{"alias_kind":"pith_short_16","alias_value":"5F2MNRK3XJNKUOVZ","created_at":"2026-06-01T01:03:31Z"},{"alias_kind":"pith_short_8","alias_value":"5F2MNRK3","created_at":"2026-06-01T01:03:31Z"}],"graph_snapshots":[{"event_id":"sha256:ca58fa24b8d8861e932a6621a510a43b51e764d3c4f0b0e42eae723ed26f81f7","target":"graph","created_at":"2026-06-01T01:03:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.31020/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite the widespread use of Transport Layer Security (TLS), its security guarantees are frequently compromised by outdated versions and misconfigurations. To analyze this problem, we collected more than 50 million TLS handshakes over a two-week period at our research institution, Fondazione Bruno Kessler, and analyzed three server-selected parameters against the recommendations of four TLS guidelines. Our analysis shows that while the use of insecure or outdated options is minimal, it remains persistent. More importantly, servers are adopting the latest TLS advancements much faster than offi","authors_text":"Domenico Siracusa, Henrique B. Brum, Luis A. Dias Knob, Matteo Franzil, Riccardo Germenia, Salvatore Manfredi","cross_cats":["cs.NI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-29T08:53:24Z","title":"Thou Shall Not Pass: Gatekeeping Outbound TLS Connections"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.31020","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:60484f28c1d3ba58d19b00d374e98bb573f865e9b4ecd9adcad075cd85f00a31","target":"record","created_at":"2026-06-01T01:03:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ad69594c06bf54cf2361d6876cc6861348d7d018f825c463f4b488aa1d7fccf6","cross_cats_sorted":["cs.NI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-29T08:53:24Z","title_canon_sha256":"bcc7dbc4b6337ec895d0e8f77e9c015ee2dd62bb57f30004351a1a1abf1c85af"},"schema_version":"1.0","source":{"id":"2605.31020","kind":"arxiv","version":1}},"canonical_sha256":"e974c6c55bba5aaa3ab9b12788ecead480898af26d70942aa32491553726d743","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e974c6c55bba5aaa3ab9b12788ecead480898af26d70942aa32491553726d743","first_computed_at":"2026-06-01T01:03:31.081570Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-01T01:03:31.081570Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"f5C7IUXdJpY3j/uu+JVA4+j6WTbs8pRzzhGPHc2LPfous2s6bCVz167CrZaaB8bsf+iDagz3zVcB/QANcmUGBg==","signature_status":"signed_v1","signed_at":"2026-06-01T01:03:31.082565Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.31020","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:60484f28c1d3ba58d19b00d374e98bb573f865e9b4ecd9adcad075cd85f00a31","sha256:ca58fa24b8d8861e932a6621a510a43b51e764d3c4f0b0e42eae723ed26f81f7"],"state_sha256":"e468696a507c2b7b14f91ecb4bf47f8e3ce29705dc2fc78226e96f9a46b1f332"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VzOrKl/ki8T/HHoPmhN25KWp1gLkuTgnKljtCd6sxabFYC94fezSXfzDwGayMdxNjA2sroqWNbl0HL+4P0E5DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-08T22:16:50.670621Z","bundle_sha256":"fff357935a9db4ca4c5c789c0a2ab18d9a24406bb869de1d0d1b1481ce4f9322"}}