{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:ECYU55XIP4R4P4PFANO3YVZAWH","short_pith_number":"pith:ECYU55XI","canonical_record":{"source":{"id":"2409.01887","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-03T13:27:33Z","cross_cats_sorted":[],"title_canon_sha256":"81ed13caef90564d5f2cfc255852f09dcb44c7d60f28746b22fa930ea34dd0e1","abstract_canon_sha256":"d9f146be8b9ac0dc35856544bd178f12125887605b111050903bfe8edca3dd9c"},"schema_version":"1.0"},"canonical_sha256":"20b14ef6e87f23c7f1e5035dbc5720b1f38f004ace8fe3f1dbe3344ff4be28b5","source":{"kind":"arxiv","id":"2409.01887","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.01887","created_at":"2026-07-05T09:02:35Z"},{"alias_kind":"arxiv_version","alias_value":"2409.01887v1","created_at":"2026-07-05T09:02:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.01887","created_at":"2026-07-05T09:02:35Z"},{"alias_kind":"pith_short_12","alias_value":"ECYU55XIP4R4","created_at":"2026-07-05T09:02:35Z"},{"alias_kind":"pith_short_16","alias_value":"ECYU55XIP4R4P4PF","created_at":"2026-07-05T09:02:35Z"},{"alias_kind":"pith_short_8","alias_value":"ECYU55XI","created_at":"2026-07-05T09:02:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:ECYU55XIP4R4P4PFANO3YVZAWH","target":"record","payload":{"canonical_record":{"source":{"id":"2409.01887","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-03T13:27:33Z","cross_cats_sorted":[],"title_canon_sha256":"81ed13caef90564d5f2cfc255852f09dcb44c7d60f28746b22fa930ea34dd0e1","abstract_canon_sha256":"d9f146be8b9ac0dc35856544bd178f12125887605b111050903bfe8edca3dd9c"},"schema_version":"1.0"},"canonical_sha256":"20b14ef6e87f23c7f1e5035dbc5720b1f38f004ace8fe3f1dbe3344ff4be28b5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:02:35.440860Z","signature_b64":"GUTgM/iRxSgUaDyK7hXsBDLDK4EHHP9R06Vyr4pcgUvum5nbGn5qC6SwUtMZyyleysO9uFmT3q7qGQWBPtNMAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"20b14ef6e87f23c7f1e5035dbc5720b1f38f004ace8fe3f1dbe3344ff4be28b5","last_reissued_at":"2026-07-05T09:02:35.440303Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:02:35.440303Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.01887","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:02:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"R2H2C2Jwgy5TAWKY5Dxkg9MgbNDvHJRs7jGH95hM8ps7Yxx5XV+guyGUF1romo+3hIb/uamoU8uL/YiJs9XGCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T14:03:58.487810Z"},"content_sha256":"88697d687b68cf54bc455075d87ea270dbfa264eb896c67e78eabfc8f8639e40","schema_version":"1.0","event_id":"sha256:88697d687b68cf54bc455075d87ea270dbfa264eb896c67e78eabfc8f8639e40"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:ECYU55XIP4R4P4PFANO3YVZAWH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Detecting and Measuring Security Implications of Entangled Domain Verification in CDN","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jianjun Chen, Mingming Zhang, Robert H. Deng, Run Guo, Tianhao Yang, Ximeng Liu, Zhiwei Lin, Zhuoran Cao, Ziyu Lin","submitted_at":"2024-09-03T13:27:33Z","abstract_excerpt":"Content Delivery Networks (CDNs) offer a protection layer for enhancing the security of websites. However, a significant security flaw named Absence of Domain Verification (DVA) has become emerging recently. Although this threat is recognized, the current practices and security flaws of domain verification strategies in CDNs have not been thoroughly investigated. In this paper, we present DVAHunter, an automated system for detecting DVA vulnerabilities that can lead to domain abuse in CDNs. Our evaluation of 45 major CDN providers reveals the prevalence of DVA: most (39/45) providers do not pe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.01887","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.01887/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:02:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xJ998ok0aMisWsqw07AVXZvKIrwNUd92+S3ePtzGqwaUAZS/ZqsgsZ87CbPAlVwGOUig5sZeu74Mwel8exHpDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T14:03:58.488300Z"},"content_sha256":"0cf97e1b75c720db5ed12e66eb65bca0821963f6eafe0f7ca46f352dbc7b4a3d","schema_version":"1.0","event_id":"sha256:0cf97e1b75c720db5ed12e66eb65bca0821963f6eafe0f7ca46f352dbc7b4a3d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ECYU55XIP4R4P4PFANO3YVZAWH/bundle.json","state_url":"https://pith.science/pith/ECYU55XIP4R4P4PFANO3YVZAWH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ECYU55XIP4R4P4PFANO3YVZAWH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T14:03:58Z","links":{"resolver":"https://pith.science/pith/ECYU55XIP4R4P4PFANO3YVZAWH","bundle":"https://pith.science/pith/ECYU55XIP4R4P4PFANO3YVZAWH/bundle.json","state":"https://pith.science/pith/ECYU55XIP4R4P4PFANO3YVZAWH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ECYU55XIP4R4P4PFANO3YVZAWH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:ECYU55XIP4R4P4PFANO3YVZAWH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d9f146be8b9ac0dc35856544bd178f12125887605b111050903bfe8edca3dd9c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-03T13:27:33Z","title_canon_sha256":"81ed13caef90564d5f2cfc255852f09dcb44c7d60f28746b22fa930ea34dd0e1"},"schema_version":"1.0","source":{"id":"2409.01887","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.01887","created_at":"2026-07-05T09:02:35Z"},{"alias_kind":"arxiv_version","alias_value":"2409.01887v1","created_at":"2026-07-05T09:02:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.01887","created_at":"2026-07-05T09:02:35Z"},{"alias_kind":"pith_short_12","alias_value":"ECYU55XIP4R4","created_at":"2026-07-05T09:02:35Z"},{"alias_kind":"pith_short_16","alias_value":"ECYU55XIP4R4P4PF","created_at":"2026-07-05T09:02:35Z"},{"alias_kind":"pith_short_8","alias_value":"ECYU55XI","created_at":"2026-07-05T09:02:35Z"}],"graph_snapshots":[{"event_id":"sha256:0cf97e1b75c720db5ed12e66eb65bca0821963f6eafe0f7ca46f352dbc7b4a3d","target":"graph","created_at":"2026-07-05T09:02:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.01887/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Content Delivery Networks (CDNs) offer a protection layer for enhancing the security of websites. However, a significant security flaw named Absence of Domain Verification (DVA) has become emerging recently. Although this threat is recognized, the current practices and security flaws of domain verification strategies in CDNs have not been thoroughly investigated. In this paper, we present DVAHunter, an automated system for detecting DVA vulnerabilities that can lead to domain abuse in CDNs. Our evaluation of 45 major CDN providers reveals the prevalence of DVA: most (39/45) providers do not pe","authors_text":"Jianjun Chen, Mingming Zhang, Robert H. Deng, Run Guo, Tianhao Yang, Ximeng Liu, Zhiwei Lin, Zhuoran Cao, Ziyu Lin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-03T13:27:33Z","title":"Detecting and Measuring Security Implications of Entangled Domain Verification in CDN"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.01887","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:88697d687b68cf54bc455075d87ea270dbfa264eb896c67e78eabfc8f8639e40","target":"record","created_at":"2026-07-05T09:02:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d9f146be8b9ac0dc35856544bd178f12125887605b111050903bfe8edca3dd9c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-03T13:27:33Z","title_canon_sha256":"81ed13caef90564d5f2cfc255852f09dcb44c7d60f28746b22fa930ea34dd0e1"},"schema_version":"1.0","source":{"id":"2409.01887","kind":"arxiv","version":1}},"canonical_sha256":"20b14ef6e87f23c7f1e5035dbc5720b1f38f004ace8fe3f1dbe3344ff4be28b5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"20b14ef6e87f23c7f1e5035dbc5720b1f38f004ace8fe3f1dbe3344ff4be28b5","first_computed_at":"2026-07-05T09:02:35.440303Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:02:35.440303Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GUTgM/iRxSgUaDyK7hXsBDLDK4EHHP9R06Vyr4pcgUvum5nbGn5qC6SwUtMZyyleysO9uFmT3q7qGQWBPtNMAw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:02:35.440860Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.01887","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:88697d687b68cf54bc455075d87ea270dbfa264eb896c67e78eabfc8f8639e40","sha256:0cf97e1b75c720db5ed12e66eb65bca0821963f6eafe0f7ca46f352dbc7b4a3d"],"state_sha256":"df47ead72c630893001ca5ac1ef40f64defa60bbab0ee298ff918b17f1d17c44"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FMipr6aORBpi9jVNuhGgOe9/SJaTJ8r6NzrhMoz/ji2e6/h9v4pw+4gWQpi2ieCXhGuLWYPsW0eJAmHjFUr7CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T14:03:58.492614Z","bundle_sha256":"8cbfa6cecda9e60e6481aa8e9b130bf8e2584615df2ade96d97bc75206bb8873"}}