RFC 8360-2018
重新考虑资源公钥基础设施（RPKI）验证

Resource Public Key Infrastructure (RPKI) Validation Reconsidered

非常抱歉，我们暂时无法提供预览，您可以试试： 免费下载 RFC 8360-2018 前三页，或者稍后再访问。

您也可以尝试购买此标准，
点击右侧 “购买” 按钮开始采购（由第三方提供）。

注意： 点击下载后，生成下载文件时间比较长，请耐心等待......

标准号

RFC 8360-2018

发布

2018年

发布单位

IETF - Internet Engineering Task Force

当前最新

RFC 8360-2018

 

 

适用范围

"This document specifies an alternative to the certificate validation procedure specified in RFC 6487 that reduces aspects of operational fragility in the management of certificates in the Resource Public Key Infrastructure (RPKI)@ while retaining essential security features The procedure specified in RFC 6487 requires that Resource Certificates are rejected entirely if they are found to overclaim any resources not contained on the issuing certificate@ whereas the validation process defined here allows an issuing Certification Authority (CA) to chose to communicate that such Resource Certificates should be accepted for the intersection of their resources and the issuing certificate. It should be noted that the validation process defined here considers validation under a single trust anchor (TA) only. In particular@ concerns regarding overclaims where multiple configured TAs claim overlapping resources are considered out of scope for this document. This choice is signaled by a set of alternative Object Identifiers (OIDs) per ""X.509 Extensions for IP Addresses and AS Identifiers"" (RFC 3779) and ""Certificate Policy (CP) for the Resource Public Key Infrastructure (RPKI)"" (RFC 6484). It should be noted that in case these OIDs are not used for any certificate under a trust anchor@ the validation procedure defined here has the same outcome as the procedure defined in RFC 6487. Furthermore@ this document provides an alternative to Route Origin Authorization (ROA) (RFC 6482) and BGPsec Router Certificate (BGPsec PKI Profiles -- publication requested) validation"

RFC 8360-2018相似标准

推荐