Simple Local Web PKI Certificate Resource Preservation Management for Internet Browser
draft-liu-lamps-browser-webpki-cert-preservation-06
| Document | Type |
Expired Internet-Draft
(individual)
Expired & archived
|
|
|---|---|---|---|
| Authors | Penghui Liu , Yu Fu , Meiling Chen , Xiang Liu , Yu Zhang | ||
| Last updated | 2025-12-18 (Latest revision 2025-06-16) | ||
| RFC stream | (None) | ||
| Intended RFC status | (None) | ||
| Formats | |||
| Stream | Stream state | (No stream defined) | |
| Consensus boilerplate | Unknown | ||
| RFC Editor Note | (None) | ||
| IESG | IESG state | Expired | |
| Telechat date | (None) | ||
| Responsible AD | (None) | ||
| Send notices to | (None) |
This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:
Abstract
The management of Web PKI certificate resources presents a challenge when the misalignment of ownership and management rights over certificate resources of one organization creating a risk of unilateral suspension and revocation by another competing organizations. This situation undermines the stability of critical infrastructure and affects the integrity of authentication systems. To address these concerns, this document proposes a mechanism that allows Internet browsers to create a customized management view of certificate resources, enabling them to override the verification results from specific certification authorities as needed. This approach enhances security, facilitates stakeholder collaboration, and preserves the operational integrity of foundational industry systems.
Authors
Penghui Liu
Yu Fu
Meiling Chen
Xiang Liu
Yu Zhang
(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)