|
The PKI Resource Query Protocol (PRQP) is an Internet protocol used for obtaining information about services associated with a X.509 Certification Authority. It is described in a draft document from the PKIX working group and was released on 2013-Oct-23〔http://datatracker.ietf.org/doc/rfc7030/〕 as a proposed standard in RFC7030. It was created by Massimiliano Pala to solve Interoperability and Usabilities issues among PKIs, specifically addressing certain problems associated with finding services and data repositories associated with a CA. Messages communicated via PRQP are encoded in ASN.1 and are usually communicated over HTTP. ==Background== At present, ever more services and protocols are being defined to address different needs of users and administrators in PKIs. With the deployment of new applications and services, the need to access PKI resources provided by different organizations is critical. Each application needs to be told about how to find these services for each new certificate it encounters. Therefore, each application needs to be properly configured by filling in complex configuration options whose meaning is mostly unknown to the average user (and likely to the administrator as well). The ''PRQP Protocol'' addresses these interoperability and trust building issues among separate PKI islands. In fact, it provides a dynamic method capable to provide more timely information about provided services and available PKI resources. It can also be used to help in painless rollover between services, e.g. switching from CRLs to OCSP for certificate validation. Moreover, PRQP allows PKI management to dynamically choose which services are to be provided based on the faced challenges during infrastructure deployment. In other words, PRQP can be thought to be similar (in concept) to a DNS for PKI resources. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「PKI Resource Query Protocol」の詳細全文を読む スポンサード リンク
|