## 29.02.2016 AK
----
[[Technology/KnowledgeBase/SignificantTechnicalStandards/CZ|Ĩesky]] | '''english'''
----
. '''NOTA BENE - WORK IN PROGRESS''' - [[#Inputs_&_Thoughts|Your Inputs & Thoughts]] :-)
. '''To Technology''' '''[[Technology#Technology_Knowledge_Base| Knowledge Base]]''' - '''To Technology Knowledge Base -''' '''[[Technology/KnowledgeBase| Overview]]''' - '''To Brain - Policies & [[Brain/PoliciesAndSignificantTechnicalStandards#Significant_Technical_Standards| Significant Technical Standards]]'''
----
== Significant Technical Standards for CAcert.org ==
. Description / Intro
<
>
== The Internet Engineering Task Force - IETF ==
. '''Web Address''': http://www.ietf.org - ''' Web Address of Request for Comments - RFC''': http://www.rfc-editor.org
. '''RFC 5636''' - '''Traceable Anonymous Certificate''' [[http://www.rfc-editor.org/rfc/rfc5636.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc5636.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 5617''' - '''[[Brain/Assurer'sCryptographyLibrary/GlossaryAbbreviations#D| DomainKeys]] Identified Mail (DKIM) Author Domain Signing Practices ([[Brain/Assurer'sCryptographyLibrary/GlossaryAbbreviations#A| ADSP]])''' [[http://www.rfc-editor.org/rfc/rfc5617.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc5617.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 5280''' - '''Internet X.509 Public Key Infrastructure: Certificate and Certificate Revocation List (CRL) Profile''' [[http://www.rfc-editor.org/rfc/rfc5280.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc5280.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 5246''' - '''The Transport Layer Security (TLS) Protocol - Version 1.2''' [[http://www.rfc-editor.org/rfc/rfc5246.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc5246.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 4985''' - '''Internet X.509 Public Key Infrastructure: Subject Alternative Name for Expression of Service Name''' [[http://www.rfc-editor.org/rfc/rfc4985.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc4985.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 4871''' - '''[[Brain/Assurer'sCryptographyLibrary/GlossaryAbbreviations#D| DomainKeys]] Identified Mail (DKIM) Signatures''' [[http://www.rfc-editor.org/rfc/rfc4871.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc4871.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 4343''' - '''Domain Name System (DNS) Case Insensitivity Clarification''' [[http://www.rfc-editor.org/rfc/rfc4343.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc4343.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 4158''' - '''Internet X.509 Public Key Infrastructure: Certification Path Building''' [[http://www.rfc-editor.org/rfc/rfc4158.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc4158.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 3647''' - '''Internet X.509 Public Key Infrastructure: Certificate Policy and Certification Practices Framework''' [[http://www.rfc-editor.org/rfc/rfc3647.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc3647.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 3492''' - '''Punycode: A Bootstring encoding of Unicode for Internationalized Domain Names in Applications - IDNA''' [[http://www.rfc-editor.org/rfc/rfc3492.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc3492.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 3491''' - ''' Nameprep: A Stringprep Profile for Internationalized Domain Names - IDNA''' [[http://www.rfc-editor.org/rfc/rfc3491.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc3491.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 3490''' - '''Internationalizing Domain Names in Applications - IDNA''' [[http://www.rfc-editor.org/rfc/rfc3490.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc3490.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 3454''' - '''Preparation of Internationalized Strings ("stringprep")''' [[http://www.rfc-editor.org/rfc/rfc3454.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc3454.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 3281''' - '''An Internet Attribute Certificate Profile for Authorization''' [[http://www.rfc-editor.org/rfc/rfc3281.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc3281.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 3280''' - '''Internet X.509 Public Key Infrastructure: Certificate and Certificate Revocation List ([[Brain/Assurer'sCryptographyLibrary/GlossaryAbbreviations#C| CRL]]) Profile''' [[http://www.rfc-editor.org/rfc/rfc3280.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc3280.txt.pdf| Text only]] - Print Version .pdf Download - /!\ NOTE: Replaced by RFC 5280 /!\
. '''RFC 3279''' - '''Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List ([[Brain/Assurer'sCryptographyLibrary/GlossaryAbbreviations#C| CRL]]) Profile''' [[http://www.rfc-editor.org/rfc/rfc3279.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc3279.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 3161''' - '''Internet X.509 Public Key Infrastructure: Time-Stamp Protocol (TSP)''' [[http://www.ietf.org/rfc/rfc3161.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc3161.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 2606''' - '''Reserved Top Level DNS Names''' [[http://www.rfc-editor.org/rfc/rfc2606.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc2606.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 2560''' - '''X.509 Internet Public Key Infrastructure: Online Certificate Status Protocol - OCSP''' [[http://www.rfc-editor.org/rfc/rfc2560.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc2560.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 2246''' - '''The TLS Protocol Version 1.0''' [[http://www.rfc-editor.org/rfc/rfc2246.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc2246.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 2142''' - '''MAILBOX NAMES FOR COMMON SERVICES, ROLES AND FUNCTIONS''' [[http://www.rfc-editor.org/rfc/rfc2142.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc2142.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 2119''' - '''Key words for use in RFCs to Indicate Requirement Levels''' [[http://www.rfc-editor.org/rfc/rfc2119.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc2119.txt.pdf| Text only]] - Print Version .pdf Download
. '''RFC 1918''' - '''Address Allocation for Private Internets''' [[http://www.rfc-editor.org/rfc/rfc1918.txt| Text only]] - Website Version [[http://www.rfc-editor.org/pdfrfc/rfc1918.txt.pdf| Text only]] - Print Version .pdf Download
. For individual search: [[http://www.rfc-editor.org/rfcsearch.html| RFC Search Engine]] , Keyword: e.g. X.509 - or alternatively: [[http://www.rfc-editor.org/rfc-index2.html| RFC Index]]
. more about [[http://www.ietf.org/dyn/wg/charter/pkix-charter.html| PKIX Working Group developing Standards for X.509-based Public Key Infrastructures - PKI's]] ''- source: ietf.org''
. more about [[http://en.wikipedia.org/wiki/Internet_Engineering_Task_Force| IETF]] ''- source: en.wikipedia.org''
. more about [[http://en.wikipedia.org/wiki/Request_for_Comments| RFC]] ''- source: en.wikipedia.org''
<
>
== International Telecommunication Union - ITU ==
. '''Web Address''': http://www.itu.int
. [[http://www.itu.int/rec/T-REC-X.509| Overview Recommendation X.509]]
. more about [[http://en.wikipedia.org/wiki/ITU| ITU]] ''- source: en.wikipedia.org''
<
>
== The Unicode Consortium - UNICODE ==
. '''Web Address''': http://www.unicode.org
. [[http://www.unicode.org/charts| Unicode Character Code Charts]]
. more about [[http://en.wikipedia.org/wiki/Unicode| Unicode]] ''- source: en.wikipedia.org''
<
>
== Internet Corporation for Assigned Names and Numbers - ICANN ==
. '''Web Address''': http:///www.icann.org
. [[http://www.icann.org/en/topics/idn| Internet Domain Names - IDN]]
. more about [[http://en.wikipedia.org/wiki/ICANN| ICANN]] ''- source: en.wikipedia.org''
<
>
----
== Inputs & Thoughts ==
. 20090929-[[RPHerrold]]
. {{{
The National Institute of Standards and Technology (NIST) is a non-regulatory federal agency within the US Commerce Department. It is promulgates standards which much be met to reach inclusion into obtaining cross signing to be able to provide a complete validation path route to root.
It manages the FIPS standards which must be met for a CA to be able to interoperate with the US federal CA, which, as a functional matter, is needed for attaining such a path
http://csrc.nist.gov/groups/ST/crypto_apps_infra/pki/index.html
see: FIPS 151-2 testing and certification
http://csrc.nist.gov/publications/PubsFIPS.html
}}}
----
. YYYYMMDD-YourName
. {{{
Text / Your Statements, thoughts and e-mail snippets, Please
}}}
----
. YYYYMMDD-YourName
. {{{
Text / Your Statements, thoughts and e-mail snippets, Please
}}}
----
<
>
'''Category''' or '''Categories'''<
>
. CategoryPolicy
. CategoryCustom
. ''note: Please, replace "Custom" with an existing Category or if needed create a new, meaningful one.''