| < draft-ietf-trans-threat-analysis-11.txt | draft-ietf-trans-threat-analysis-12.txt > | |||
|---|---|---|---|---|
| Public Notary Transparency S. Kent | Public Notary Transparency S. Kent | |||
| Internet-Draft BBN Technologies | Internet-Draft BBN Technologies | |||
| Intended status: Informational April 17, 2017 | Intended status: Informational October 13, 2017 | |||
| Expires: October 17, 2017 | Expires: April 13, 2017 | |||
| Attack and Threat Model for Certificate Transparency | Attack and Threat Model for Certificate Transparency | |||
| draft-ietf-trans-threat-analysis-11 | draft-ietf-trans-threat-analysis-12 | |||
| Abstract | Abstract | |||
| This document describes an attack model and discusses threats for the | This document describes an attack model and discusses threats for the | |||
| Web PKI context in which security mechanisms to detect mis-issuance | Web PKI context in which security mechanisms to detect mis-issuance | |||
| of web site certificates are being developed. The model provides an | of web site certificates are being developed. The model provides an | |||
| analysis of detection and remediation mechanisms for both syntactic | analysis of detection and remediation mechanisms for both syntactic | |||
| and semantic mis-issuance. The model introduces an outline of | and semantic mis-issuance. The model introduces an outline of | |||
| attacks to organize the discussion. The model also describes the | attacks to organize the discussion. The model also describes the | |||
| roles played by the elements of the Certificate Transparency (CT) | roles played by the elements of the Certificate Transparency (CT) | |||
| skipping to change at page 1, line 37 ¶ | skipping to change at page 1, line 37 ¶ | |||
| Internet-Drafts are working documents of the Internet Engineering | Internet-Drafts are working documents of the Internet Engineering | |||
| Task Force (IETF). Note that other groups may also distribute | Task Force (IETF). Note that other groups may also distribute | |||
| working documents as Internet-Drafts. The list of current Internet- | working documents as Internet-Drafts. The list of current Internet- | |||
| Drafts is at http://datatracker.ietf.org/drafts/current/. | Drafts is at http://datatracker.ietf.org/drafts/current/. | |||
| Internet-Drafts are draft documents valid for a maximum of six months | Internet-Drafts are draft documents valid for a maximum of six months | |||
| and may be updated, replaced, or obsoleted by other documents at any | and may be updated, replaced, or obsoleted by other documents at any | |||
| time. It is inappropriate to use Internet-Drafts as reference | time. It is inappropriate to use Internet-Drafts as reference | |||
| material or to cite them other than as "work in progress." | material or to cite them other than as "work in progress." | |||
| This Internet-Draft will expire on April 21, 2017. | This Internet-Draft will expire on April 13, 2018. | |||
| Copyright Notice | Copyright Notice | |||
| Copyright (c) 2016 IETF Trust and the persons identified as the | Copyright (c) 2016 IETF Trust and the persons identified as the | |||
| document authors. All rights reserved. | document authors. All rights reserved. | |||
| This document is subject to BCP 78 and the IETF Trust's Legal | This document is subject to BCP 78 and the IETF Trust's Legal | |||
| Provisions Relating to IETF Documents | Provisions Relating to IETF Documents | |||
| (http://trustee.ietf.org/license-info) in effect on the date of | (http://trustee.ietf.org/license-info) in effect on the date of | |||
| publication of this document. Please review these documents | publication of this document. Please review these documents | |||
| skipping to change at page 30, line 30 ¶ | skipping to change at page 30, line 30 ¶ | |||
| <http://www.rfc-editor.org/info/rfc6960>. | <http://www.rfc-editor.org/info/rfc6960>. | |||
| [RFC6961] Pettersen, Y., "The Transport Layer Security (TLS) | [RFC6961] Pettersen, Y., "The Transport Layer Security (TLS) | |||
| Multiple Certificate Status Request Extension", RFC 6961, | Multiple Certificate Status Request Extension", RFC 6961, | |||
| DOI 10.17487/RFC6961, June 2013, | DOI 10.17487/RFC6961, June 2013, | |||
| <http://www.rfc-editor.org/info/rfc6961>. | <http://www.rfc-editor.org/info/rfc6961>. | |||
| Author's Address | Author's Address | |||
| Stephen Kent | Stephen Kent | |||
| BBN Technologies | Independent | |||
| 10 Moulton Street | ||||
| Cambridge, MA 02138 | ||||
| USA | USA | |||
| Phone: +1 (617) 873-3988 | ||||
| Email: kent@alum.mit.edu | Email: kent@alum.mit.edu | |||
| End of changes. 5 change blocks. | ||||
| 8 lines changed or deleted | 5 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ | ||||