Google Researchers Propose New Plan to Shore Up CA System
http://j.mp/sJGaQ5 (threatpost)
"The system proposed by Google's Adam Langley and Ben Laurie comprises
three separate ideas, but relies on the creation of a publicly
viewable log of every public certificate that's issued by a CA. There
could be any number of public logs of these certificates, but the logs
will be structured so that they are append-only. The entries in the
logs will be the end certificates in the issuance chain. In addition
to the logs, the proposal includes the use of proofs that are sent
with each certificate to the user's browser. Laurie and Langley
haven't defined exactly what the proof would look like, but suggest
that it could be an extra certificate or a TLS extension."
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- Global Coalition for Transparent Internet Performance: http://www.gctip.org
- PRIVACY Forum: http://www.vortex.com
Member: ACM Committee on Computers and Public Policy
Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren
Twitter: https://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
