National Institute of Standards and Tech

Nistir 7924 Reference Certificate Policy National Institute of Standards and Tech

NISTIR 7924 May 2014 Draft The purpose of this document is to identify a baseline set of security controls and practices to support the secure issuance of certificates. This baseline was developed with publicly-trusted Certification Authorities (CAs) in mind. These CAs, who issue the certificates used to secure websites using TLS and verify the authenticity of software, play a particularly important role online. This document formatted as a Reference Certificate Policy (CP). We expect different applications and relying party communities will tailor this document based on their specific needs. It was structured and developed so that the CP developer can fill in sections specific to organizational needs and quickly produce a suitable CP. Why buy a book you can download for free? First you gotta find it and make sure it