@misc{rfc9618, series = {Request for Comments}, number = 9618, howpublished = {RFC 9618}, publisher = {RFC Editor}, doi = {10.17487/RFC9618}, url = {https://www.rfc-editor.org/info/rfc9618}, author = {David Benjamin}, title = {{Updates to X.509 Policy Validation}}, pagetotal = 19, year = 2024, month = aug, abstract = {This document updates RFC 5280 to replace the algorithm for X.509 policy validation with an equivalent, more efficient algorithm. The original algorithm built a structure that scaled exponentially in the worst case, leaving implementations vulnerable to denial-of-service attacks.}, }