Research and implementation of certificate validation system based on DNS
基于域名系统的证书验证系统研究与实现

For solving tile interoperability during current certificate validation process of different CAs, the new system DNS-OCSP was proposed by incorporating DNS-style referral, which can construct a unified certificate validation mechanism between different CAs. Tile architecture of DNS-OCSP was presented, and the workflow of DNS-OCSP was illuminated. It has been shown that the DNS-OCSP is more accessible and sealable.