SPKI
A standard structure within X.509 certificates that carries a public key together with its algorithm identifier, following the ASN.1 specification. It is commonly used for public key pinning and trust policies.
Timeline (last 90 days)
Future versions of the Go language will reject certificate chains containing eight specific SPKIs (Subject Public Key Info).
SPKI is a standard field in X.509 certificates that follows the ASN.1 SubjectPublicKeyInfo structure and contains the public key algorithm identifier and the public key itself.
Trust policies typically use a hash of the SPKI (such as SHA-256) as a fixed identifier for the public key, a technique known as "public key pinning".
Rejecting specific SPKIs this time is a continuation of Go's proactive defense strategy, but being precise down to the public key level means that even if a CA as a whole remains trusted, its specific public keys can be individually marked as untrusted.
All Facts (4)
SPKI is a standard field in X.509 certificates that follows the ASN.1 SubjectPublicKeyInfo structure and contains the public key algorithm identifier and the public key itself.
50%UnverifiedTrust policies typically use a hash of the SPKI (such as SHA-256) as a fixed identifier for the public key, a technique known as "public key pinning".
50%UnverifiedRejecting specific SPKIs this time is a continuation of Go's proactive defense strategy, but being precise down to the public key level means that even if a CA as a whole remains trusted, its specific public keys can be individually marked as untrusted.
50%UnverifiedFuture versions of the Go language will reject certificate chains containing eight specific SPKIs (Subject Public Key Info).
50%