X.509 Alternative: SDSI

• SDSI: Simple Distributed Security Infrastructure (Rivest, Lampson)

  • Merging with IETF SPKI: Simple Public-Key Infrastructure in SDSI 2.0
  • Eliminate X.500 names - use DNS and text
  • Everyone is their own CA
  • Instead of ASN.1 use ìS-expressionsî and simple syntax
  • Name and Authorization certificates

Previous slide

Next slide

Back to first slide

View graphic version