Update to DirectoryString Processing in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

Santesson, Stefan; Housley, Russell

doi:10.17487/rfc4630

Cited by 8 publications

(2 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…* Sections 4.1.2.4 and 4.1.2.6 incorporate the conditions for continued use of legacy text encoding schemes that were specified in [RFC4630]. Where in use by an established PKI, transition to UTF8String could cause denial of service based on name chaining failures or incorrect processing of name constraints.…”

mentioning

confidence: 99%

Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

Cooper¹,

Santesson²,

Farrell³

et al. 2008

Self Cite

867

931

View full text Add to dashboard Cite

This memo profiles the X.509 v3 certificate and X.509 v2 certificate revocation list (CRL) for use in the Internet. An overview of this approach and model is provided as an introduction. The X.509 v3 certificate format is described in detail, with additional information regarding the format and semantics of Internet name forms. Standard certificate extensions are described and two Internet-specific extensions are defined. A set of required certificate extensions is specified. The X.509 v2 CRL format is described in detail along with standard and Internet-specific extensions. An algorithm for X.509 certification path validation is described. An ASN.1 module and examples are provided in the appendices.

show abstract

mentioning

confidence: 99%

Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

Cooper¹,

Santesson²,

Farrell³

et al. 2008

Self Cite

867

931

View full text Add to dashboard Cite

show abstract

“…The signatureValue field contains the digital signature encoded in the ASN.1 DER as BIT STRING. Details of this field are provided in RFC3279 [38], RFC4055 [39], and RFC4491 [40].…”

mentioning

confidence: 99%

A Blockchain-Based Decentralized Public Key Infrastructure Using the Web of Trust

Halder,

Das Roy,

Shin

2024

JCP

View full text Add to dashboard Cite

Internet applications rely on Secure Socket Layer (SSL)/Transport Security Layer (TSL) certifications to establish secure communication. However, the centralized nature of certificate authorities (CAs) poses a risk, as malicious third parties could exploit the CA to issue fake certificates to malicious web servers, potentially compromising the privacy and integrity of user data. In this paper, we demonstrate how the utilization of decentralized certificate verification with blockchain technology can effectively address and mitigate such attacks. We present a decentralized public key infrastructure (PKI) based on a distributed trust model, e.g., Web of Trust (WoT) and blockchain technologies, to overcome vulnerabilities like single points of failure and to prevent tampering with existing certificates. In addition, our infrastructure establishes a trusted key-ring network that decouples the authentication process from CAs in order to enhance secure certificate issuance and accelerate the revocation process. Furthermore, as a proof of concept, we present the implementation of our proposed system in the Ethereum blockchain, confirming that the proposed framework meets the five identified requirements. Our experimental results demonstrate the effectiveness of our proposed system in practice, albeit with additional overhead compared to conventional PKIs.

show abstract

Analyzing Proposals for Improving Authentication on the TLS/SSL-Protected Web

Brown

Jenkins

2014

Security Standardisation Research

View full text Add to dashboard Cite

Update to DirectoryString Processing in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

Cited by 8 publications

References 2 publications

Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

A Blockchain-Based Decentralized Public Key Infrastructure Using the Web of Trust

Analyzing Proposals for Improving Authentication on the TLS/SSL-Protected Web

Contact Info

Product

Resources

About