{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:V5MVRGB3TLUSGCBKN4IX4FR2I4","short_pith_number":"pith:V5MVRGB3","canonical_record":{"source":{"id":"1810.07304","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-16T22:58:44Z","cross_cats_sorted":[],"title_canon_sha256":"41e77730fefde088a3ae67d515070ac6394459ed9072a9f9fe44ebb5ce638ffb","abstract_canon_sha256":"9d7f8452813bae23ac5de8d38849aa0bad135265ed547de5eb971de011b12850"},"schema_version":"1.0"},"canonical_sha256":"af5958983b9ae923082a6f117e163a471d03f8cf6fd2c2aae23d0dec42311e00","source":{"kind":"arxiv","id":"1810.07304","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1810.07304","created_at":"2026-05-17T23:52:27Z"},{"alias_kind":"arxiv_version","alias_value":"1810.07304v1","created_at":"2026-05-17T23:52:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1810.07304","created_at":"2026-05-17T23:52:27Z"},{"alias_kind":"pith_short_12","alias_value":"V5MVRGB3TLUS","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_16","alias_value":"V5MVRGB3TLUSGCBK","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_8","alias_value":"V5MVRGB3","created_at":"2026-05-18T12:32:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:V5MVRGB3TLUSGCBKN4IX4FR2I4","target":"record","payload":{"canonical_record":{"source":{"id":"1810.07304","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-16T22:58:44Z","cross_cats_sorted":[],"title_canon_sha256":"41e77730fefde088a3ae67d515070ac6394459ed9072a9f9fe44ebb5ce638ffb","abstract_canon_sha256":"9d7f8452813bae23ac5de8d38849aa0bad135265ed547de5eb971de011b12850"},"schema_version":"1.0"},"canonical_sha256":"af5958983b9ae923082a6f117e163a471d03f8cf6fd2c2aae23d0dec42311e00","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:52:27.057016Z","signature_b64":"CuTsJcuuZ2UCdwFldCrHa7MC7h7GgA9sETIFjvzy0j3Y/IAxzGBZ12VCSftyb9kEKOOSpcHNzXqkzvHGm1VBAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"af5958983b9ae923082a6f117e163a471d03f8cf6fd2c2aae23d0dec42311e00","last_reissued_at":"2026-05-17T23:52:27.056387Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:52:27.056387Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1810.07304","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:52:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8RSdcx/kYtJBsST+9NPk4ptfc3FI2WhHdp/HqNgB+yzD4X8N5NKfJF/CU8cLrZL53/91RQziGJNLKxiMoqMNCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-28T14:57:01.399132Z"},"content_sha256":"1f3c33de952dbf305057225a08be234379d465b36015982825ab4a0033ed1caa","schema_version":"1.0","event_id":"sha256:1f3c33de952dbf305057225a08be234379d465b36015982825ab4a0033ed1caa"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:V5MVRGB3TLUSGCBKN4IX4FR2I4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Tracking Users across the Web via TLS Session Resumption","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Christian Burkert, Erik Sy, Hannes Federrath, Mathias Fischer","submitted_at":"2018-10-16T22:58:44Z","abstract_excerpt":"User tracking on the Internet can come in various forms, e.g., via cookies or by fingerprinting web browsers. A technique that got less attention so far is user tracking based on TLS and specifically based on the TLS session resumption mechanism. To the best of our knowledge, we are the first that investigate the applicability of TLS session resumption for user tracking. For that, we evaluated the configuration of 48 popular browsers and one million of the most popular websites. Moreover, we present a so-called prolongation attack, which allows extending the tracking period beyond the lifetime"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1810.07304","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:52:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j9azDGYDnJevQByztcGDaCgMZ8PV+Bw1lVFRZNVVJcd19MbFE96uj7E3klIFld/y0IZPPWaVJ397QTSyRIaVBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-28T14:57:01.399485Z"},"content_sha256":"ca161d1cb197b1471379ec11cbf9c6f13dca26dd9bf05d3a026b04a47e93018a","schema_version":"1.0","event_id":"sha256:ca161d1cb197b1471379ec11cbf9c6f13dca26dd9bf05d3a026b04a47e93018a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/V5MVRGB3TLUSGCBKN4IX4FR2I4/bundle.json","state_url":"https://pith.science/pith/V5MVRGB3TLUSGCBKN4IX4FR2I4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/V5MVRGB3TLUSGCBKN4IX4FR2I4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-28T14:57:01Z","links":{"resolver":"https://pith.science/pith/V5MVRGB3TLUSGCBKN4IX4FR2I4","bundle":"https://pith.science/pith/V5MVRGB3TLUSGCBKN4IX4FR2I4/bundle.json","state":"https://pith.science/pith/V5MVRGB3TLUSGCBKN4IX4FR2I4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/V5MVRGB3TLUSGCBKN4IX4FR2I4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:V5MVRGB3TLUSGCBKN4IX4FR2I4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9d7f8452813bae23ac5de8d38849aa0bad135265ed547de5eb971de011b12850","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-16T22:58:44Z","title_canon_sha256":"41e77730fefde088a3ae67d515070ac6394459ed9072a9f9fe44ebb5ce638ffb"},"schema_version":"1.0","source":{"id":"1810.07304","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1810.07304","created_at":"2026-05-17T23:52:27Z"},{"alias_kind":"arxiv_version","alias_value":"1810.07304v1","created_at":"2026-05-17T23:52:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1810.07304","created_at":"2026-05-17T23:52:27Z"},{"alias_kind":"pith_short_12","alias_value":"V5MVRGB3TLUS","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_16","alias_value":"V5MVRGB3TLUSGCBK","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_8","alias_value":"V5MVRGB3","created_at":"2026-05-18T12:32:59Z"}],"graph_snapshots":[{"event_id":"sha256:ca161d1cb197b1471379ec11cbf9c6f13dca26dd9bf05d3a026b04a47e93018a","target":"graph","created_at":"2026-05-17T23:52:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"User tracking on the Internet can come in various forms, e.g., via cookies or by fingerprinting web browsers. A technique that got less attention so far is user tracking based on TLS and specifically based on the TLS session resumption mechanism. To the best of our knowledge, we are the first that investigate the applicability of TLS session resumption for user tracking. For that, we evaluated the configuration of 48 popular browsers and one million of the most popular websites. Moreover, we present a so-called prolongation attack, which allows extending the tracking period beyond the lifetime","authors_text":"Christian Burkert, Erik Sy, Hannes Federrath, Mathias Fischer","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-16T22:58:44Z","title":"Tracking Users across the Web via TLS Session Resumption"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1810.07304","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1f3c33de952dbf305057225a08be234379d465b36015982825ab4a0033ed1caa","target":"record","created_at":"2026-05-17T23:52:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9d7f8452813bae23ac5de8d38849aa0bad135265ed547de5eb971de011b12850","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-16T22:58:44Z","title_canon_sha256":"41e77730fefde088a3ae67d515070ac6394459ed9072a9f9fe44ebb5ce638ffb"},"schema_version":"1.0","source":{"id":"1810.07304","kind":"arxiv","version":1}},"canonical_sha256":"af5958983b9ae923082a6f117e163a471d03f8cf6fd2c2aae23d0dec42311e00","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"af5958983b9ae923082a6f117e163a471d03f8cf6fd2c2aae23d0dec42311e00","first_computed_at":"2026-05-17T23:52:27.056387Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:52:27.056387Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CuTsJcuuZ2UCdwFldCrHa7MC7h7GgA9sETIFjvzy0j3Y/IAxzGBZ12VCSftyb9kEKOOSpcHNzXqkzvHGm1VBAw==","signature_status":"signed_v1","signed_at":"2026-05-17T23:52:27.057016Z","signed_message":"canonical_sha256_bytes"},"source_id":"1810.07304","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1f3c33de952dbf305057225a08be234379d465b36015982825ab4a0033ed1caa","sha256:ca161d1cb197b1471379ec11cbf9c6f13dca26dd9bf05d3a026b04a47e93018a"],"state_sha256":"43e96d7a19f1317330d263c758bcee2f6c03fe8fe602989700050427a06b1c8f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bjvNsYVTP9BU0wxKm1yCd9CalCl6j4Fun953Fr4aeZ+VraT68ccn4p5ZcF6wX+Vg4zMibqlvsRAUUVepERR6DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-28T14:57:01.401639Z","bundle_sha256":"679d22af9a14a1b07dc902e650a7261c908c5739376ba694e1c2be9b07d44e04"}}