Updates to X.509 Policy Validation

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 19
Abstract: This document updates RFC 5280 to replace the algorithm for X.509 policy validation with an equivalent, more efficient algorithm. The original algorithm built a structure that scaled exponentially in the worst case, leaving implementations vulnerable to denial-of-service attacks.
Publication Date: 2024-08-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9618
Link: https://doi.org/10.17487/RFC9618
Author(s): David Benjamin

Latest version of IETF RFC 9618

Document Versions — IETF RFC 9618

▶ IETF RFC 9618 (2024-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9618.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9618, Updates to X.509 Policy Validation. Available at https://doi.org/10.17487/RFC9618

Snippet:

IETF RFC 9618, Updates to X.509 Policy Validation. Available at https://doi.org/10.17487/RFC9618

HTML (ISO 690 compliant)

Preview:

IETF RFC 9618, Updates to X.509 Policy Validation. Available at https://doi.org/10.17487/RFC9618

Snippet:

<span class="citation"><cite>IETF RFC 9618</cite>, Updates to X.509 Policy Validation. Available at <a href="https://doi.org/10.17487/RFC9618" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9618</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9618, Updates to X.509 Policy Validation
doi: 10.17487/RFC9618
url: https://doi.org/10.17487/RFC9618

Snippet:

<li>
<cite id="bib-rfc9618">IETF RFC 9618</cite>, Updates to X.509 Policy Validation
<span class="doi">10.17487/RFC9618</span>
</li>