DNS as X.509 PKIX Certificate Storage
Stockholm University
A major problem facing PKIX deployment and implementation is the problem of constructing certificate paths for input to the path validation algorithm. This draft describes the use of the DNS as a certificate store and it's implication for path validation in PKIX.