What is it about?
Software vendors maintain their own certificate root stores, which serve as the anchor of trust for server-authenticated network connections. A detailed look at these root stores show significant differences between them. The trusted organizations are different. The trusted certificates are different. And even the trust and inclusion policies are different.
Featured Image
Photo by Matt Artz on Unsplash
Why is it important?
The trust anchor (root stores) dictate the realm of trusted certificates worldwide. A misplaced trust in a root certificate can have significant impact on the secure connections.
Perspectives
The paper raises important questions to invoke wide community discussions in the area.
AbdelRahman Abdou
Carleton University
Read the Original
This page is a summary of: Position Paper: Certificate Root Stores—An Area of Unity or Disparity?, August 2022, ACM (Association for Computing Machinery), DOI: 10.1145/3546096.3546110.
You can read the full text:
Resources
Contributors
The following have contributed to this page
