arXiv subjects

Ethan Thompson

Publications and source records attributed to Ethan Thompson.

4 recordsLinked to original sources

arXiv2025

Fine-grained CDN Delegation

The use of Content Delivery Networks (CDNs) has significantly increased over the past decade, with approximately 55 million websites currently relying on CDN services. Emerging solutions, such as Delegated Credentials (RFC 9345), lack fine-grained definitions of many critical aspects of delegation, such as the length of delegation chains, revocation mechanism, permitted operations, and a well-defined scope for said delegation. We present Delegation Certificates (DeCerts), which modify X.509 certificate standard and add new extensions to enable fine-grained CDN delegation. DeCerts allow domain owners to specify delegated and non-delegated subdomains, and control the depth of delegation extended by CDNs, which provides flexibility in delegation management. But more importantly, DeCerts are built on a new principle which provides full autonomy to domain owners-domain owners can issue DeCerts fully independent of Certificate Authorities (CAs), and thus have greater flexibility in policy control, including revocation methods. Such level of flexibility would be hard to match if CAs where to issue such certificates. Revoking a DeCert revokes delegation. We discuss multiple revocation mechanisms for a DeCerts balancing security, performance, and delegator control. We modify Firefox to support DeCert (i.e., proper validation) as a proof-of-concept, and test it to demonstrate the feasibility, compatibility of DeCerts with browsers and TLS/HTTPS protocols. DeCerts enhance the security, scalability, and manageability of CDN delegation, offering a practical solution for Internet services.

cs.NI↗

arXiv2021

Certificate Root Stores: An Area of Unity or Disparity?

Organizations like Apple, Microsoft, Mozilla and Google maintain certificate root stores, which are used as trust anchors by their software platforms. Is there sufficient consensus on their root-store inclusion and trust policies? Disparities appear astounding, including in the government-owned certificates that they trust. Such a status-quo is alarming.

cs.CR↗

arXiv2009

The Stress-Energy Tensor of Flavor Fields from AdS/CFT

We use the AdS/CFT correspondence to study the transport properties of massive N=2 hypermultiplet fields in an N=4 SU(Nc) super-Yang-Mills theory plasma in the large Nc, large 't Hooft coupling limit, and in the presence of a baryon number chemical potential and external electric and magnetic fields. In particular, we compute the flavor fields' contribution to the stress-energy tensor. We find infrared divergences in the stress-energy tensor, arising from the flavor fields' constant rate of energy and momentum loss. We regulate these divergences and extract the energy and momentum loss rates from the divergent terms. We also check our result in various limits in which the divergences are absent. The supergravity dual is a system of D7-branes, with a particular configuration of worldvolume fields, probing an AdS-Schwarzschild background. The supergravity calculation amounts to computing the stress-energy tensor of the D7-branes.

hep-th↗

arXiv2005

Probing the 5th Dimension with the QCD String

A salient feature of String/Gauge duality is an extra 5th dimension. Here we study the effect of confining deformations of AdS5 and compute the spectrum of a string stretched between infinitely massive quarks and compare it with the quantum states of the QCD flux as determined by Kuti, Juge and Morningstar in lattice simulations. In the long flux tube limit the AdS string probes the metric near the IR cutoff of the 5th dimension with a spectrum approximated by a Nambu-Goto string in 4-d flat space, whereas at short distance the string moves to the UV region with a discrete spectrum for pure AdS5. We also review earlier results on glueballs states and the cross-over between hard and soft diffractive scattering that support this picture.

hep-th↗