Current TC List
PKI Forum News
FOR IMMEDIATE RELEASE
For further information:
PKI Forum Publishes Paper Endorsing Existing Standards for Certification Authority Trust
WAKEFIELD, Mass., August 8, 2001 - The PKI Forum, Inc., a multi-vendor and end-user industry consortium focused on accelerating the adoption of public-key infrastructure (PKI) technologies (see www.oasis-pki.org), today announced its endorsement of two new industry standards: ANS X9.79 PKI Practices and Policy Framework and the WebTrustSM/TM Program for Certification Authorities.
The endorsement was made in the latest in a series of PKI Notes published by the PKI Forum, under the activities of the Best Practices Working Group. The Note supplies a brief overview and background of the two standards: ANS X9.79 PKI Practices and Policy Framework, developed by the X9 Accredited Standards Committee; and WebTrust Program for Certification Authorities, developed jointly by the American Institute of Certified Public Accountants (AICPA) and the Canadian Institute of Chartered Accountants.
"The Best Practices Working Group mission is to define and promote a practical framework of internationally recognized standards, policies and procedures for the successful implementation and operation of PKI enabled solutions," said PKI Forum president Lisa Pretty. "The group initiated a review of existing material several months ago and felt both the X9.79 and WebTrust work completed by the other organizations represented exactly what was needed in this space -- instead of duplicating efforts, the PKI Forum is formally endorsing the standards already available."
"The technical and somewhat tutorial nature of X9 standards makes them extremely valuable to vendors and end-users for implementing PKI systems. Adding auditable criteria has enhanced the standard and made it very useful for compliance measurement. Both the AICPA and the financial services industry benefit from such efforts and should collaborate whenever it is appropriate," said Dick Sweeney, Chairman of X9F, the Data and Information Security standards development group of ASC - X9.
"The WebTrust program is significant because it harmonizes the X9.79 PKI standards used by certification authorities (CAs) with the rigorous, auditable principles and criteria developed by the accounting profession for CAs," said Anthony Pugliese, vice president of member innovation at the AICPA.
"I believe that the WebTrust program for Certification Authorities clearly establishes, in the marketplace, a benchmark for reliability in providing public key technology services. These services are vital to the growth of secure e-commerce," said Cairine Wilson, Canadian Institute of Chartered Accountants- vice president of innovation.
The new PKI Note, titled CA Trust, is available on the PKI Forum Web site at www.oasis-pki.org/resources.html.
About the X9 Accredited Standards Committee
About the American Institute of Certified
Public Accountants (AICPA)
About the Canadian Institute of Chartered Accountants
About the PKI Forum, Inc.
# # #
Copyright © OASIS Open 2006. All rights reserved.