Forum Approves Requirements for SSL/TLS Certificates
SSL/TLS digital certificates are cryptographic protocols used to authenticate network connections, as well as to encrypt information for privacy over the Internet.
According to the announcement, the “Baseline Requirements for the Issuance and Management of Publicly Trusted Certificates” document aims to provide clear standards for CAs on topics including verification of identity, certificate content and profiles, CA security, revocation mechanisms, use of algorithms and key sizes, audit requirements, liability, and privacy.
These “Baseline Requirements” will take effect July 1, 2012, giving CAs time to bring SSL/TLS policies and practices into compliance with the standard. The CA/Browser Forum will continue development of the requirements to address evolving risks and threats involving SSL/TLS certificates.
The CA/Browser Forum has requested that Internet browsers and operating systems adopt the requirements among their conditions to distribute CA root certificates in their software. Major CAs, including Symantec, GoDaddy, Comodo, GlobalSign, DigiCert, Entrust, and others, have already made a commitment to implement the baseline requirements. For more information and a link to the requirements document, visit http://www.cabforum.org/.
Related content
-
SSL/TLS best practices for websites
SSL and TLS are very complex technologies. If you want to avoid wading through cryptography manuals to harden your HTTPS web server, read on for practical recommendations on establishing, securing, and optimizing your SSL/TLS configuration. -
Certificate security
Use public key pinning to map certificates to specific domains. -
Windows security with public key infrastructures
A rarely used feature for improving security in Windows environments relies on certificates issued for various applications, services, and procedures that is based on a public key infrastructure. - 90% of All SSL VPNs are Insecure
-
Securing the TLS ecosystem with Certificate Transparency
With the need for home offices during the pandemic lockdown, provisional solutions instituted on the fly during the transition from office to home require more permanent solutions, especially for securing TLS connections on the Internet.