1. Public Key Infrastructures Evolving Approaches

2. 30-December-1998Copyright(c) Yale University 19981 Brief Sordid History n X.500 Directory Authentication –Beginnings of the X.509 Standard n PEM - Privacy Enhanced Mail –A Vote of Confidence n PGP - A Radical Departure n Netscape SSL - First “real” Application –Make-do Approach

3. 30-December-1998Copyright(c) Yale University 19982 We Need a PKI! (so what is it exactly?) n An Open Purchase Order to Verisign? n A Software Package Allowing for the Creation of Certificates? n A Detailed Legal Statement Indemnifying the Institution Against Lawsuits?

4. 30-December-1998Copyright(c) Yale University 19983 Enter PKIX Addressing the Sum Total Angst of the Community

5. 30-December-1998Copyright(c) Yale University 19984 Infrastructure Trends n Increased focus on the Local over the Global –Support for more comprehensive local namespace –Cross certification support n Certificate Policy No Longer Tied to CA “ancestry”

6. 30-December-1998Copyright(c) Yale University 19985 Subject Alternate Name n Provides tagged local namespace –Alternative to overloading DN fields n Allows for more common “Internet centric” naming n Null DN allowed for non-CA certificates

7. 30-December-1998Copyright(c) Yale University 19986 Certificate Policies n Provides locally interpreted OID n Optional qualifiers provide reference to CPS statement & summary text n PolicyMappings extend policies to cross certified trust trees