{"id":320,"date":"2013-03-22T00:42:37","date_gmt":"2013-03-22T08:42:37","guid":{"rendered":"http:\/\/unmitigatedrisk.com\/?p=320"},"modified":"2013-03-31T08:38:32","modified_gmt":"2013-03-31T16:38:32","slug":"microsoft-root-program-and-excel","status":"publish","type":"post","link":"https:\/\/unmitigatedrisk.com\/?p=320","title":{"rendered":"Microsoft Root Program and Excel"},"content":{"rendered":"

The other day I was was studying up on my Excel so I could help someone with a project, today I met with a friend where we were discussing the composition of root programs.<\/p>\n

Since when you\u2019re a plumber you fix everything with a wrench out came Excel and since sometimes I can\u2019t let a problem sit still I spent far to much time slicing and dicing the Microsoft Root Program membership<\/a> list.<\/p>\n

There is a ton more that can be done, for example:<\/p>\n

    \n
  1. Root CA adoption relative to UN membership.<\/li>\n
  2. Root CA certificates based on validity dates.<\/li>\n
  3. Comparing the Microsoft Root Program membership to the Mozilla Root Program membership.<\/li>\n
  4. CAs per network (using AIA:OCSP urls as an indicator)<\/li>\n
  5. CA adoption of CDNs for OCSP and CRLs.<\/li>\n
  6. A look at how many operational facilities are associated with each organization (for example Symantec has 66 root CAs for there various brands are they all in the same facilities?).<\/li>\n<\/ol>\n

     <\/p>\n

    Anyways it was a fun exercise and I thought I would share the results with you, here is the XLSX<\/a>.<\/p>\n

    For those who do not want to look at the XSLX here are some statistics you may think are interesting:<\/p>\n

      \n
    1. 31.30% of the CAs were owned explicitly by governments.<\/li>\n
    2. 64.35% of the CAs were owned by commercial entities in the business of being third-party trust providers.<\/li>\n
    3. Of the 352 certificates they are owned by 115 organizations, 36 government, 74 commercial and 5 enterprise.<\/li>\n
    4. The USA has the most organizations who own CAs coming in at 13.04%.<\/li>\n
    5. Spain is next with 12.17% of the organizations owning \u00a0CAs being based there..<\/li>\n
    6. France is number three with 5.22% of the organizations owning \u00a0CAs being based there..<\/li>\n
    7. 17.33% of the roots use 1024bit keys.<\/li>\n
    8. 60.23% of the roots use 2048bit keys.<\/li>\n
    9. 18.47% of the roots use 4096bit keys.<\/li>\n
    10. 1.70% of the roots use ECDSA384 keys.<\/li>\n
    11. 115 of the 206\u00a0sovereign\u00a0nations have CAs within their borders.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

      The other day I was was studying up on my Excel so I could help someone with a project, today I met with a friend where we were discussing the composition of root programs. Since when you\u2019re a plumber you fix everything with a wrench out came Excel and since sometimes I can\u2019t let a […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[3,4],"tags":[81],"class_list":["post-320","post","type-post","status-publish","format-standard","hentry","category-security","category-thoughts","tag-root-program"],"_links":{"self":[{"href":"https:\/\/unmitigatedrisk.com\/index.php?rest_route=\/wp\/v2\/posts\/320","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/unmitigatedrisk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/unmitigatedrisk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/unmitigatedrisk.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/unmitigatedrisk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=320"}],"version-history":[{"count":0,"href":"https:\/\/unmitigatedrisk.com\/index.php?rest_route=\/wp\/v2\/posts\/320\/revisions"}],"wp:attachment":[{"href":"https:\/\/unmitigatedrisk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/unmitigatedrisk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/unmitigatedrisk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}