Enrollment over Secure Transport

Pritikin, Max; Yee, Peter; Harkins, Dan

doi:10.17487/rfc7030

Cited by 15 publications

(2 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The provisioning of the certificate to the IoT device is done with the Enrollment over Secure Transport (EST) protocol [16]. We used Simple Python EST server + CA [18] as the provisioning server.…”

Section: Provisioning and Configuration Servers And Clientsmentioning

confidence: 99%

Credential Provisioning and Device Configuration with EAP

Boire

Akgün

Ginzboorg³

et al. 2021

Proceedings of the 19th ACM International Symposium on Mobility Management and Wireless Access

View full text Add to dashboard Cite

The Extensible Authentication Protocol (EAP) is used for authenticating client devices to WiFi networks, and it is designed to be extensible with new authentication methods. We look at ways to extend the protocol to support credential provisioning and configuration of new client devices. As large numbers of IoT devices are deployed, the task will be simplified by combining the network connectivity, identity and certificate provisioning, and applicationlayer connectivity to one process. The solution will also allow the use of a one-time credential for the initial authentication, so that the long-term device certificate is issued automatically after the first connection to the network. The paper analyzes the requirements and architectural design options that implement such a user experience. We consider solutions that transfer short bootstrapping data inside the EAP session and then implement the provisioning and configuration with web APIs over HTTPS. This allows future flexibility and speed of development in the provisioning and configuration steps. We designed and implemented several architecturally different solutions and present the comparison results and also compare with previous proposals that have similar goals. CCS CONCEPTS• Networks → Network protocol design; • Security and privacy → Mobile and wireless security.

show abstract

Section: Provisioning and Configuration Servers And Clientsmentioning

confidence: 99%

Credential Provisioning and Device Configuration with EAP

Boire

Akgün

Ginzboorg³

et al. 2021

Proceedings of the 19th ACM International Symposium on Mobility Management and Wireless Access

View full text Add to dashboard Cite

show abstract

“…A central element in the creation of Let's Encrypt was the Automated Certificate Management Environment (ACME) protocol. Unlike prior certificate management protocols (e.g., CMP, CMC, and EST [10,77,82]), ACME is tailored to the needs of the Web PKI and was designed with scalable, automated issuance as a core goal.…”

Section: The Acme Protocolmentioning

confidence: 99%

Let's Encrypt

Aas¹,

Barnes

Case

et al. 2019

Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security

View full text Add to dashboard Cite

Let's Encrypt is a free, open, and automated HTTPS certificate authority (CA) created to advance HTTPS adoption to the entire Web. Since its launch in late 2015, Let's Encrypt has grown to become the world's largest HTTPS CA, accounting for more currently valid certificates than all other browser-trusted CAs combined. By January 2019, it had issued over 538 million certificates for 223 million domain names. We describe how we built Let's Encrypt, including the architecture of the CA software system (Boulder) and the structure of the organization that operates it (ISRG), and we discuss lessons learned from the experience. We also describe the design of ACME, the IETF-standard protocol we created to automate CA-server interactions and certificate issuance, and survey the diverse ecosystem of ACME clients, including Certbot, a software agent we created to automate HTTPS deployment. Finally, we measure Let's Encrypt's impact on the Web and the CA ecosystem. We hope that the success of Let's Encrypt can provide a model for further enhancements to the Web PKI and for future Internet security infrastructure. CCS CONCEPTS • Networks → Web protocol security; • Security and privacy → Security services; Usability in security and privacy.

show abstract