Support for Short-Term, Automatically Renewed (STAR) Certificates in the Automated Certificate Management Environment (ACME)
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 22
- Abstract
- Public key certificates need to be revoked when they are compromised, that is, when the associated private key is exposed to an unauthorized entity. However, the revocation process is often unreliable. An alternative to revocation is issuing a sequence of certificates, each with a short validity period, and terminating the sequence upon compromise. This memo proposes an Automated Certificate Management Environment (ACME) extension to enable the issuance of Short-Term, Automatically Renewed (STAR) X.509 certificates.
- Publication Date
- 2020-03-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC8739- Link
- https://doi.org/10.17487/RFC8739
- Author(s)
- Yaron ShefferDiego LopezOscar Gonzalez de DiosAntonio PastorThomas Fossati
- Keyword(s)
- OCSP, CRL, Revocation
Latest version of IETF RFC 8739
Document Versions — IETF RFC 8739
-
▶ IETF RFC 8739 (2020-03-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 3339 [Active*]
- IETF RFC 7231 [Superseded*]
- IETF RFC 7234 [Superseded*]
- IETF RFC 7807 [Superseded*]
- IETF RFC 8126 [Active*]
- IETF RFC 8174 [Active*]
- IETF RFC 8555 [Active*]
Bibliographic Reference(s)
- 10.1145-3133956.3134007 — ACER EXTERNAL
- GITHUB.chromium.ct-policy — OBRIEN EXTERNAL
- IETF.draft-ietf-acme-star-delegation-03 — I-D.ietf-acme-star-delegation EXTERNAL
- IETF.draft-nir-saag-star-01 — I-D.nir-saag-star EXTERNAL
- Topalovic, E., Saeta, B., Huang, L.S., Jackson, C., and D. Boneh, "Towards Short-Lived Certificates", 2012, <https://www.ieee-security.org/TC/W2SP/2012/papers/w2sp12-final9.pdf>. EXTERNAL
- Stark, E., Huang, L.S., Israni, D., Jackson, C., and D. Boneh, "The case for prefetching and prevalidating TLS server certificates", February 2012, <https://crypto.stanford.edu/~dabo/pubs/abstracts/ssl-prefetch.html>. EXTERNAL
- IETF RFC 6066 [Active*]
- IETF RFC 7633 [Active*]
- W3C.WD-capability-urls.20140218 — W3C.CAPABILITY-URLS EXTERNAL
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC8739.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 8739, Support for Short-Term, Automatically Renewed (STAR) Certificates in the Automated Certificate Management Environment (ACME). Available at https://doi.org/10.17487/RFC8739
Snippet:
IETF RFC 8739, Support for Short-Term, Automatically Renewed (STAR) Certificates in the Automated Certificate Management Environment (ACME). Available at https://doi.org/10.17487/RFC8739
HTML (ISO 690 compliant)
Preview:
IETF RFC 8739, Support for Short-Term, Automatically Renewed (STAR) Certificates in the Automated Certificate Management Environment (ACME). Available at https://doi.org/10.17487/RFC8739
Snippet:
<span class="citation"><cite>IETF RFC 8739</cite>, Support for Short-Term, Automatically Renewed (STAR) Certificates in the Automated Certificate Management Environment (ACME). Available at <a href="https://doi.org/10.17487/RFC8739" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8739</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 8739, Support for Short-Term, Automatically Renewed (STAR) Certificates in the Automated Certificate Management Environment (ACME)
doi: 10.17487/RFC8739
url: https://doi.org/10.17487/RFC8739
doi: 10.17487/RFC8739
url: https://doi.org/10.17487/RFC8739
Snippet:
<li> <cite id="bib-rfc8739">IETF RFC 8739</cite>, Support for Short-Term, Automatically Renewed (STAR) Certificates in the Automated Certificate Management Environment (ACME) <span class="doi">10.17487/RFC8739</span> </li>
Referenced By
- IETF RFC 8994 [Active*]
- IETF RFC 9060 [Active*]