TLS2VC: A Decentralized WebProof Framework Enabling Verifiable Credentials for TLS Sessions

Abstract

This work proposes TLS2VC, a decentralized WebProof framework that distributes trust across multiple Notaries. Notaries attest to TLS session authenticity—server identity and encrypted transcript integrity—without accessing plaintext, then issue Verifiable Credentials (VCs) that Verifiers can validate. To prevent concentration of malicious Notaries, we employ verifiable random selection via Verifiable Random Function (VRF) combined with threshold signatures. We provide probabilistic security analysis showing that honest Notaries are included with high probability, and derive formulas to compute the minimum number of Notaries k required for a target security level. A lightweight prototype demonstrates practical feasibility, enabling reuse of existing web information as trusted credentials in Web3 and self-sovereign identity environments.