Planning for PKI: Best Practices Guide for Deploying Public Key Infrastructure

An in–depth technical guide to the security technology driving Internet e–commerce.
"Planning for PKI" examines this cornerstone Internet security technology. Written by two of the architects of the Internet PKI standards, this book provides authoritative technical guidance for network engineers, architects, and managers who need to implement the right PKI architecture for their organization. Readers will learn that building a successful PKI is an on going process, not a one–time event. The authors discuss results and lessons learned from three early PKI deployments, helping readers avoid the pitfalls and emulate the successes of early PKI adopters.
Using plain and direct language, the authors share their extensive knowledge of PKI standards development in the Internet Engineering Task Force (IETF) and elsewhere. Subtle points about the Internet PKI standards are liberally sprinkled throughout the book. These nuggets provide insight into the intent of some of the esoteric topics in the standards, enabling greater interoperability.
"Planning for PKI" gathers the PKI state–of–the–art into one volume, covering everything from PKI history to emerging PKI–related technologies.

Spis treści:
Foreword.
Acknowledgments.
Introduction.
Cryptography Primer.
PKI Basics.
Authentication Mechanisms.
PKI Components and Users.
PKI Architectures.
X.509 Public Key Certificates.
Certificate Revocation Lists.
Repository Protocols.
Building and Validating Certification Paths.
PKI Management Protocols.
Policies, Procedures, and PKI.
PKI–Enabled Applications.
Defense Message System 1.0.
California Independent Service Operator.
The Federal Bridge CA Project.
Future Developments.
Appendix A: ASN.1 Primer.
Appendix B: Object Identifiers.
Bibliography.
Index.

Nota biograficzna:
RUSS HOUSLEY is Chief Scientist for SPYRUS, a leading pro vider of security products. He has contributed to the development of many standards, including PKIX Part 1, S/MIME, and MSP, the security cornerstone of the U.S. Defense Message System. He is a member of the President′s Export Council Subcommittee on Encryption, and chair of the IETF S/MIME Working Group.
TIM POLK is the technical lead for PKI at the National Institute of Standards and Technology (NIST). He has participated in federal PKI projects, such as the Federal Bridge CA project, since 1995. He has contributed to the development of many standards including PKIX Part 1. He is currently the co–chair of the IETF PKIX Working Group.

Okładka tylna:
An in–depth technical guide to the security technology driving Internet e–commerce.
"Planning for PKI" examines this cornerstone Internet security technology. Written by two of the architects of the Internet PKI standards, this book provides authoritative technical guidance for network engineers, architects, and managers who need to implement the right PKI architecture for their organization. Readers will learn that building a successful PKI is an on going process, not a one–time event. The authors discuss results and lessons learned from three early PKI deployments, helping readers avoid the pitfalls and emulate the successes of early PKI adopters.
Using plain and direct language, the authors share their extensive knowledge of PKI standards development in the Internet Engineering Task Force (IETF) and elsewhere. Subtle points about the Internet PKI standards are liberally sprinkled throughout the book. These nuggets provide insight into the intent of some of the esoteric topics in the standards, enabling greater interoperability.
"Planning for PKI" gathers the PKI state–of–the–art into one volume, covering everything from PKI history to emerging PKI–related technologies.