{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:CXLSN35NLWQFVNGD5N6SRDBCE7","short_pith_number":"pith:CXLSN35N","canonical_record":{"source":{"id":"2302.08000","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-16T00:19:46Z","cross_cats_sorted":[],"title_canon_sha256":"048c30f9be2eca41b7418058b5beff15d91389f1e72d03922087b42452438f2d","abstract_canon_sha256":"f6660a58338a6c6bdcdcf1908c0433741471ca1071ad23d5af4cff2953109bc3"},"schema_version":"1.0"},"canonical_sha256":"15d726efad5da05ab4c3eb7d288c2227e763ad096e307d0ceb1200e1f732382a","source":{"kind":"arxiv","id":"2302.08000","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.08000","created_at":"2026-07-05T05:43:20Z"},{"alias_kind":"arxiv_version","alias_value":"2302.08000v2","created_at":"2026-07-05T05:43:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.08000","created_at":"2026-07-05T05:43:20Z"},{"alias_kind":"pith_short_12","alias_value":"CXLSN35NLWQF","created_at":"2026-07-05T05:43:20Z"},{"alias_kind":"pith_short_16","alias_value":"CXLSN35NLWQFVNGD","created_at":"2026-07-05T05:43:20Z"},{"alias_kind":"pith_short_8","alias_value":"CXLSN35N","created_at":"2026-07-05T05:43:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:CXLSN35NLWQFVNGD5N6SRDBCE7","target":"record","payload":{"canonical_record":{"source":{"id":"2302.08000","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-16T00:19:46Z","cross_cats_sorted":[],"title_canon_sha256":"048c30f9be2eca41b7418058b5beff15d91389f1e72d03922087b42452438f2d","abstract_canon_sha256":"f6660a58338a6c6bdcdcf1908c0433741471ca1071ad23d5af4cff2953109bc3"},"schema_version":"1.0"},"canonical_sha256":"15d726efad5da05ab4c3eb7d288c2227e763ad096e307d0ceb1200e1f732382a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:43:20.714565Z","signature_b64":"hxThmbZsRG1gw/uo8LJrdyAZkasvYy81SjlhSdgwrowcaXPceGDNx3aFJqfK36prk2dWMDbU+0Ac/CRPXmMlBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"15d726efad5da05ab4c3eb7d288c2227e763ad096e307d0ceb1200e1f732382a","last_reissued_at":"2026-07-05T05:43:20.714087Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:43:20.714087Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.08000","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:43:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bFS38nEJRklXFAiM0V4DEQeiJXbclWIqfNfOqncEiY/Qkjdn9awtPBpyEuhdk6kzQU7kYGZVdkOllrsvk5kqBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:11:17.999887Z"},"content_sha256":"52dc5f52ddfb7c5f0135dd22c7a2e3923ca2c618600dd76b3ffefa53a04f478c","schema_version":"1.0","event_id":"sha256:52dc5f52ddfb7c5f0135dd22c7a2e3923ca2c618600dd76b3ffefa53a04f478c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:CXLSN35NLWQFVNGD5N6SRDBCE7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"How Effective is Multiple-Vantage-Point Domain Control Validation?","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Grace Cimaszewski, Henry Birge-Lee, Jennifer Rexford, Liang Wang, Prateek Mittal","submitted_at":"2023-02-16T00:19:46Z","abstract_excerpt":"Multiple-vantage-point domain control validation (multiVA) is an emerging defense for mitigating BGP hijacking attacks against certificate authorities. While the adoption of multiVA is on the rise, little work has quantified its effectiveness against BGP hijacks in the wild. We bridge the gap by presenting the first analysis framework that measures the security of a multiVA deployment under real-world network configurations (e.g., DNS and RPKI). Our framework accurately models the attack surface of multiVA by 1) considering the attacks on DNS nameservers involved in domain validation, 2) consi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.08000","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.08000/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:43:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m8b5uiULOYNeFYY33GNUHLyVXG1rvslehBPUqQUPErLg26YaYwjpolGmMEGpELYltDnQoUcKkJgKU36kdpGcDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:11:18.000382Z"},"content_sha256":"3a46e1f66c0958ee750443aa8028bc4120e263323e38aa73f6309c9a0bef027d","schema_version":"1.0","event_id":"sha256:3a46e1f66c0958ee750443aa8028bc4120e263323e38aa73f6309c9a0bef027d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CXLSN35NLWQFVNGD5N6SRDBCE7/bundle.json","state_url":"https://pith.science/pith/CXLSN35NLWQFVNGD5N6SRDBCE7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CXLSN35NLWQFVNGD5N6SRDBCE7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T17:11:18Z","links":{"resolver":"https://pith.science/pith/CXLSN35NLWQFVNGD5N6SRDBCE7","bundle":"https://pith.science/pith/CXLSN35NLWQFVNGD5N6SRDBCE7/bundle.json","state":"https://pith.science/pith/CXLSN35NLWQFVNGD5N6SRDBCE7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CXLSN35NLWQFVNGD5N6SRDBCE7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:CXLSN35NLWQFVNGD5N6SRDBCE7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f6660a58338a6c6bdcdcf1908c0433741471ca1071ad23d5af4cff2953109bc3","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-16T00:19:46Z","title_canon_sha256":"048c30f9be2eca41b7418058b5beff15d91389f1e72d03922087b42452438f2d"},"schema_version":"1.0","source":{"id":"2302.08000","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.08000","created_at":"2026-07-05T05:43:20Z"},{"alias_kind":"arxiv_version","alias_value":"2302.08000v2","created_at":"2026-07-05T05:43:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.08000","created_at":"2026-07-05T05:43:20Z"},{"alias_kind":"pith_short_12","alias_value":"CXLSN35NLWQF","created_at":"2026-07-05T05:43:20Z"},{"alias_kind":"pith_short_16","alias_value":"CXLSN35NLWQFVNGD","created_at":"2026-07-05T05:43:20Z"},{"alias_kind":"pith_short_8","alias_value":"CXLSN35N","created_at":"2026-07-05T05:43:20Z"}],"graph_snapshots":[{"event_id":"sha256:3a46e1f66c0958ee750443aa8028bc4120e263323e38aa73f6309c9a0bef027d","target":"graph","created_at":"2026-07-05T05:43:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.08000/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multiple-vantage-point domain control validation (multiVA) is an emerging defense for mitigating BGP hijacking attacks against certificate authorities. While the adoption of multiVA is on the rise, little work has quantified its effectiveness against BGP hijacks in the wild. We bridge the gap by presenting the first analysis framework that measures the security of a multiVA deployment under real-world network configurations (e.g., DNS and RPKI). Our framework accurately models the attack surface of multiVA by 1) considering the attacks on DNS nameservers involved in domain validation, 2) consi","authors_text":"Grace Cimaszewski, Henry Birge-Lee, Jennifer Rexford, Liang Wang, Prateek Mittal","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-16T00:19:46Z","title":"How Effective is Multiple-Vantage-Point Domain Control Validation?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.08000","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:52dc5f52ddfb7c5f0135dd22c7a2e3923ca2c618600dd76b3ffefa53a04f478c","target":"record","created_at":"2026-07-05T05:43:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f6660a58338a6c6bdcdcf1908c0433741471ca1071ad23d5af4cff2953109bc3","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-16T00:19:46Z","title_canon_sha256":"048c30f9be2eca41b7418058b5beff15d91389f1e72d03922087b42452438f2d"},"schema_version":"1.0","source":{"id":"2302.08000","kind":"arxiv","version":2}},"canonical_sha256":"15d726efad5da05ab4c3eb7d288c2227e763ad096e307d0ceb1200e1f732382a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"15d726efad5da05ab4c3eb7d288c2227e763ad096e307d0ceb1200e1f732382a","first_computed_at":"2026-07-05T05:43:20.714087Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:43:20.714087Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hxThmbZsRG1gw/uo8LJrdyAZkasvYy81SjlhSdgwrowcaXPceGDNx3aFJqfK36prk2dWMDbU+0Ac/CRPXmMlBw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:43:20.714565Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.08000","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:52dc5f52ddfb7c5f0135dd22c7a2e3923ca2c618600dd76b3ffefa53a04f478c","sha256:3a46e1f66c0958ee750443aa8028bc4120e263323e38aa73f6309c9a0bef027d"],"state_sha256":"3c8a21aebd2f28c51e141e752c73a9892695e4ba70e2c1e601f44bdb5cf9359e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sFRRVihhKKc5ZeXPoMWVhk3ES2uJ6fmAWsOup0vJxks9qPXVf6kwG6fjmkELRgaXcpniZbzq+sHCW/dHLHqSDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T17:11:18.003959Z","bundle_sha256":"f4dfbac23483cecd2f5c5a5e3d397e85450d59d9d9be6e8291721181c9c1564c"}}