RFC 9618: Updates to X.509 Policy Validation
In plain English — editorial summary, not part of the RFC
This document updates RFC 5280 to replace the algorithm for X.509 policy validation with an equivalent, more efficient algorithm. The original algorithm built a structure that scaled exponentially in the worst case, leaving implementations vulnerable to denial-of-service attacks.
Document record
- Document ID
- RFC9618
- Published
- August 2024
- Authors
- D. Benjamin
- Status
- PROPOSED STANDARD
- Stream
- IETF
- Area
- sec
- Pages
- 19
- Also known as
- —
- Updates:
- RFC 5280
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 9611Internet Key Exchange Protocol Version 2 (IKEv2) Support for Per-Resource Child Security Associations (SAs)Current
July 2024
- RFC 9608No Revocation Available for X.509 Public Key CertificatesCurrent
June 2024
- RFC 9629Using Key Encapsulation Mechanism (KEM) Algorithms in the Cryptographic Message Syntax (CMS)Current
August 2024
- RFC 9635Grant Negotiation and Authorization Protocol (GNAP)Current
October 2024
- RFC 9598Internationalized Email Addresses in X.509 CertificatesCurrent
May 2024
- RFC 9597CBOR Web Token (CWT) Claims in COSE HeadersCurrent
June 2024
- RFC 9596CBOR Object Signing and Encryption (COSE) "typ" (type) Header ParameterCurrent
June 2024
- RFC 9594Key Provisioning for Group Communication Using Authentication and Authorization for Constrained Environments (ACE)Current
September 2024
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?