Facebook, Mozilla, and Cloudflare announce new TLS Delegated Credentials standard

guest · Nov 1, 2019

Facebook, Mozilla, and Cloudflare announce new TLS Delegated Credentials standard
New TLS protocol extension will shorten the window an attacker has to perform a man-in-the-middle attack
November 1, 2019
https://www.zdnet.com/article/faceb...ounce-new-tls-delegated-credentials-standard/

Facebook, Mozilla, and Cloudflare announced today a new technical specification called TLS Delegated Credentials, currently undergoing standardization at the Internet Engineering Task Force (IETF).
The new standard will work as an extension to TLS, a cryptographic protocol that underpins the more widely-known HTTPS protocol, used for loading websites inside browsers via an encrypted connection.
HOW TLS DELEGATE CREDENTIALS WORKS
For example, a big website like Facebook has thousands of servers spread all over the world. In order to support HTTPS traffic on all, Facebook has to place a copy of its TLS certificate private key on each one.
This is a dangerous setup.

The TLS Delegate Credentials extension allows site owners to create short-lived TLS private keys (called delegated credentials) that they can deploy to these multi-server setups, instead of the real TLS private key.
The delegated credentials can live up to seven days and can be rotated automatically once they expire.
Click to expand...

You can read more in-depth technical explanations about the new TLS Delegated Credentials extensions on the Facebook, Mozilla, and Cloudflare blogs.
The IETF draft specification is available here. TLS Delegated Credentials will be compatible with the TLS protocol v1.3 and later.
Click to expand...

Log in or Sign up

Facebook, Mozilla, and Cloudflare announce new TLS Delegated Credentials standard

guest Guest

Log in or Sign up

Facebook, Mozilla, and Cloudflare announce new TLS Delegated Credentials standard

guest Guest

Useful Searches