Skip to content
Snippets Groups Projects
  1. Dec 14, 2022
  2. Feb 25, 2020
  3. Feb 10, 2020
  4. Jan 25, 2017
  5. Aug 05, 2016
    • Daniel Kahn Gillmor's avatar
      Log key-pinning strings for TLS keys · 0cd371a4
      Daniel Kahn Gillmor authored
      RFC 7858 explicitly defines an out-of-band key pinning profile as one
      authentication mechanism.  It uses the same format for representing
      the pin as HPKP does (RFC 7469).
      
      By logging this pin directly upon first use of the X.509 credentials,
      we make it a little bit easier for an admin to publish part of a
      pinset.
      
      For ideal operation (including preparation for key rollover), a backup
      public key should also be provided, but this is not defined
      functionally here.
      0cd371a4