Certificate Transparency

Laurie, B., Langley, A., & Kasper, E. (2013). Certificate Transparency. Rekor.

Type

Report

Intellectual base

Grey literature

Year

2013

DOI

10.17487/rfc6962

Link

https://www.rfc-editor.org/info/rfc6962/

Cited from

public_administration_policy

Cited by

3 citations across 3 artifacts.

Each citation links to the sentence it supports in the citing article.

Primes

• Certification
  • The structural remedy — certificate transparency logs that make every issued certificate publicly auditable — is a meta-layer watching the certifiers, the prime's recursive diagnosis applied as cure.

    This sourcePublic append-only (Merkle-tree) logs that make every issued certificate auditable — a meta-layer watching the certifiers against single-bad-CA failure.

Mechanisms

• Public-Key Certificate
  • The discipline that guards against this is Certificate Transparency — public, append-only logs of every issued certificate, so a subject can detect a rogue certificate for its own name even when no individual verifier could.

    This sourceSpecifies publicly auditable, append-only certificate logs that let domain owners detect misissuance.

• Transparency Log Monitoring
  • Certificate Transparency and the Sigstore Rekor signing log are the real-world instances of the append-only records this monitor watches.

    This sourceBoth are the kind of public record this monitor cross-checks against.

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Links previously used in the corpus

Before the registry existed this work was also linked 1 other way.

• https://doi.org/10.17487/RFC6962 ×1

Registry ID ref:85a1aa58505e · see in the full table