I-D Action: draft-evans-palmer-hsts-pinning-00.txt
internet-drafts@ietf.org Wed, 21 September 2011 18:27 UTC
Return-Path: <internet-drafts@ietf.org>
X-Original-To: i-d-announce@ietfa.amsl.com
Delivered-To: i-d-announce@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0088421F8ABC for <i-d-announce@ietfa.amsl.com>; Wed, 21 Sep 2011 11:27:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.564
X-Spam-Level:
X-Spam-Status: No, score=-102.564 tagged_above=-999 required=5 tests=[AWL=0.035, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qiGg7bJs9y5j for <i-d-announce@ietfa.amsl.com>; Wed, 21 Sep 2011 11:27:14 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83D3521F8500 for <i-d-announce@ietf.org>; Wed, 21 Sep 2011 11:27:14 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-evans-palmer-hsts-pinning-00.txt
X-Test-IDTracker: no
X-IETF-IDTracker: 3.60
Message-ID: <20110921182714.26900.78835.idtracker@ietfa.amsl.com>
Date: Wed, 21 Sep 2011 11:27:14 -0700
X-BeenThere: i-d-announce@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: internet-drafts@ietf.org
List-Id: Internet Draft Announcements only <i-d-announce.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/i-d-announce>, <mailto:i-d-announce-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/i-d-announce>
List-Post: <mailto:i-d-announce@ietf.org>
List-Help: <mailto:i-d-announce-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/i-d-announce>, <mailto:i-d-announce-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Sep 2011 18:27:15 -0000
A New Internet-Draft is available from the on-line Internet-Drafts directories.
Title : Certificate Pinning Extension for HSTS
Author(s) : Chris Evans
Chris Palmer
Filename : draft-evans-palmer-hsts-pinning-00.txt
Pages : 11
Date : 2011-09-21
This memo describes an extension to the HTTP Strict Transport
Security specification allowing web host operators to instruct UAs to
remember ("pin") hosts' cryptographic identities for a given period
of time. During that time, UAs will require that the host present a
certificate chain including at least one public key whose fingerprint
matches one or more of the pinned fingerprints for that host. By
effectively reducing the scope of authorities who can authenticate
the domain during the lifetime of the pin, we hope pinning reduces
the incidence of man-in-the-middle attacks due to compromised
Certification Authorities and other authentication errors and
attacks.
A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-evans-palmer-hsts-pinning-00.txt
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
This Internet-Draft can be retrieved at:
ftp://ftp.ietf.org/internet-drafts/draft-evans-palmer-hsts-pinning-00.txt
- I-D Action: draft-evans-palmer-hsts-pinning-00.txt internet-drafts