Managing Interoperability in Non-Hierarchical Public Key Infrastructures.

摘要: This paper discusses considerations for certificate issuing systems and processing applications, directory in environments that employ nonhierarchical public key infrastructures (PKIs). The observations recommendations here, while applicable to almost any non-hierarchical PKI, are most relevant situations where the establishment of interoperability among PKIs disparate organizations is a primary goal. They based on our work with PKI testbed comprised bridge certification authority (CA) interconnecting multiple CA products from several vendors. Our view more sophisticated aspects X.509 issuance (e.g., policies mappings, name constraints) tools allow establish limits security between [1]. Consequently, we believe extensions these features should be routinely populated by systems, expected processed applications. goal herein promote relying parties, still allowing owning maintain control.