Certificate Revocation the Responsible Way

Authors:
J. K. Millen;R. N. Wright
Affiliations:
-;-
Venue:
CSDA '98 Proceedings of the Conference on Computer Security, Dependability, and Assurance: From Needs to Solutions
Year:
1998

Citing 0
Cited 5

Generalized certificate revocation

Proceedings of the 27th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Obstacles to freedom and privacy by design

Proceedings of the tenth conference on Computers, freedom and privacy: challenging the assumptions
Efficient fault-tolerant certificate revocation

Proceedings of the 7th ACM conference on Computer and communications security
A Response to ''Can We Eliminate Certificate Revocation Lists?''

FC '00 Proceedings of the 4th International Conference on Financial Cryptography
Evaluation of certificate validation mechanisms

Computer Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

Public-key certificates are managed by a combination of the informal web of trust and the use of servers maintained by organizations. Prompt and reliable distribution of revocation notices is an essential ingredient for security in a public-key infrastructure. Current schemes based on certificate revocation lists on key servers are inadequate. An approach based on distributing revocation notices to "dependers" on each certificate, with cascading forwarding, is suggested. Research is necessary to investigate architectural issues, particularly reliability and response time analysis.