5. PKI 1/9
Public key certificates are required to protect the authenti-city and integrity of public keys (and to protect against Ñman-in-the-middleì-attacks)
- ITU-T X.509 version 3 is the certificate format of choice for most applications
- Nevertheless, ITU-T X.509 version 3 still requires a profiling process for a specific application environment (e.g., IETF PKIX WG for the Internet)
- The IETF SPKI WG is developing and specifying an alternative certificate format and trust model for the Internet application environment