Digital Certificate Revocation

This paper is from the SANS Institute Reading Room site. Reposting is not permitted without express written permission. Digital Certificate Revocation Secure communication on the Internet is built around the trust of digital certificates. Web servers present a digital certificate to browsers as authentication much like people present an official picture ID as proof of identity. Digital certificates have an expiration date, however, prior to expiration there are multiple reasons why a certificate may no longer be valid. The Internet s Public Key Infrastructure provides methods for browsers to check the validity of digital certificates but are all browsers configured t... Copyright SANS Institut