PKI: It's Not Dead, Just Resting

Despite enthusiastic predictions in the trade press, an X.509-style PKI has so far failed to eventuate to any significant degree. This paper looks at some of the reasons behind this, examining why a pure X.509-style PKI may never appear outside a few closed, highly-controlled environments such as government agencies. On the other hand there are many instances in which situation- and application-specific uses of certificates can be employed in a manner that avoids the shortcomingsofX.509'sone-size-(mis)fits-all approach. The paper examines a number of these situation-specific approaches to working with certificates, and concludes with a collection of useful design rules to consider before embarking on a PKI project.

• Type: Journal
• Year: 2002
• Where: COMPUTER
• Authors: Peter Gutmann
• Keywords: COMPUTER 2002, Enthusiastic Predictions, Pure X.509-style Pki, X.509-style PKI