@inproceedings{nthms-itcqp-22,
  author = {Marcin Nawrocki and Pouyan Fotouhi Tehrani and Raphael Hiesgen and Jonas M{\"u}cke and Thomas C. Schmidt and Matthias W{\"a}hlisch},
  booktitle = {Proc. of 18th International Conference on emerging Networking EXperiments and Technologies (CoNEXT)},
  title = {{On the Interplay between TLS Certificates and QUIC Performance}},
  year = {2022},
  address = {New York, NY, USA},
  pages = {204--213},
  publisher = {ACM},
  abstract = {In this short paper, we revisit the performance of the QUIC connection setup and relate the design choices for fast and secure connections to common Web deployments. We analyze over 1M~Web domains with 272k~QUIC-enabled services and find two worrying results. First, current practices of creating, providing, and fetching Web certificates undermine reduced round trip times during the connection setup since sizes of 35\% of server certificates exceed the amplification limit. Second, faulty server implementations lead to larger amplification factors than QUIC permits, which increase even further in IP~spoofing scenarios. We present guidance for all involved stakeholders to improve the situation.},
  awards = {Best Paper Award and CoNEXT Community Award},
  theme = {nsec|mint},
  url = {https://dl.acm.org/doi/10.1145/3555050.3569123},
}