This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
Public Key Pinning Extension for HTTP
Public Key Pinning Extension for HTTP

Version management

Difference between version and

At line 1 added 18 lines
!!! Overview
[{$pagename}] ([RFC 7469] [HPKP]) defines a new [HTTP Header Field] that allows web host operators to instruct [user-agents] to remember ("pin") the hosts' [cryptographic] identities over a period of time.
During that time, [user-agents] will require that the host presents a [Certificate Chain] including at least one Subject [Public Key] Info structure whose [Certificate Fingerprint] matches one of the pinned [Certificate Fingerprint] for that host. By effectively reducing the number of trusted authorities who can [authenticate] the domain during the lifetime of the pin, pinning may reduce the incidence of [Man-In-The-Middle] [attacks] due to compromised [Certification Authorities|Certificate Authority].
[{$pagename}] is a form of [Certificate Pinning]
!! Intent To Deprecate And Remove: Public Key Pinning
The problem with [HPKP] is that it can be quite a complex idea to get your head around and requires a perfect deployment otherwise things can go wrong.[2]
* 2017-10-27 [Google] published Intent Public Key Pinning. [1]
* 2017-10-24 I'm giving up on HPKP - Scott Helme [2]
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [Google published Intent Public Key Pinning|https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/he9tr7p3rZ8|target='_blank'] - based on information obtained 2017-10-30-
* [#2] - [I'm giving up on HPKP|https://scotthelme.co.uk/im-giving-up-on-hpkp/|target='_blank'] - based on information obtained 2017-10-30-
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop