Computer Security Bookmarks

PKI, Cetificates

Security Protocols

E-mail Security

Smart Cards

LDAP

Java/Mobile Code

Law and Security

XML

Resources

Security is probably one of the most active areas in Information Technology. Here I compiled some anchors which might be important for you. This reflects the important part security systems will play in the protection of electronic commerce in the Information Society.

PKI and Certificates

Introduction to Public-Key Cryptography [http://developer.netscape.com/docs/manuals/security/pkin/index.htm]
IETF PKIX Working Groups [http://www.imc.org/ietf-pkix/]
The PKI page [http://www.pki-page.org/]
Public-Key Infrastructure (X.509) (IETF pkix working group) [http://www.ietf.org/html.charters/pkix-charter.html]
RFC2459- Internet X.509 Public Key Infrastructure Certificate and CRL Profile [ftp://ftp.isi.edu/in-notes/rfc2459.txt]
Netscape Certificate Specifications [http://home.netscape.com/eng/security/certs.html]
Netscape Certificate Extensions Specification [http://home.netscape.com/eng/security/comm4-cert-exts.html]
Netscape Certificate Database Information [http://www.drh-consultancy.demon.co.uk/cert7.html]
Operating Netscape Navigator in Federal Information Processing Standards Publications (FIPS PUB 140-1 Compliant Mode) [http://developer.netscape.com/docs/manuals/security/fips/index.htm]
Signing Text from JavaScript [http://developer.netscape.com/docs/manuals/security/sgntxt/contents.htm]
Using the Signature Verification Tool [http://developer.netscape.com/docs/manuals/security/signver/signver.htm]
Setting up a CA using free software [http://cognac.epfl.ch/SIC/SL/CA/]

[TOP]

Security Protocols (SET,SSL,TLS etc.)

Netscape Security Documentation [http://developer.netscape.com/docs/manuals/security.html]
Introduction to SSL -SSL Manual [http://developer.netscape.com/docs/manuals/security/sslin/]
The SSL Protocol Version 3.0 [http://home.netscape.com/eng/ssl3/]
Open SSL Oroject [http://www.openssl.org/]
SSLeay Documentation [http://www.di.unito.it/~rabser/ssleay/]
Fortify project SSL Encryption Check [https://www.fortify.net/sslcheck.html]
FAQ on Web security (W3C) [http://www.w3.org/Security/Faq/]
Transport Layer Security (TLS) Charter [http://www.ietf.org/html.charters/tls-charter.html]
RFC2246 - The Transport Layer Security (TLS) protocol [ftp://ftp.isi.edu/in-notes/rfc2246.txt]
IP Security Protocol (ipsec) Charter [http://www.ietf.org/html.charters/ipsec-charter.html]
IPsec Internet Drafts [http://www.vpnc.org/ids.html]
FreeS/WAN Project: Home Page [http://www.xs4all.nl/~freeswan/]
SET™ Secure Electronic Transaction [http://www.setco.org/]
IETF Authentication, Authorization and Accounting (AAA) Working Group [http://www.ietf.org/html.charters/aaa-charter.html]

[TOP]

E-mail Security

S/MIME Mail Security ((IETF smime working group) [http://www.ietf.org/html.charters/smime-charter.html]
RFC1422 - Privacy Enhancement for Internet Electronic Mail: Part II: Certificate- Based Key Management [http://www.ietf.org/rfc/rfc1422.txt]
International PGP home page [http://www.pgpi.com/]

[TOP]

Smart Cards

Netscape's Smart Card Overview [http://developer.netscape.com/tech/security/certs/cards.html]
Datakey Home Page [http://www.datakey.com/]
Gemplus Home Page [http://www.gemplus.com/]
Schlumberger Home Page [http://www.slb.com/]
Open Card Framework [http://www.opencard.org/]
Java Card Special Interest Group [http://www.javacard.org/]

[TOP]

LADAP

JNDI Tutorial from SUN [http://java.sun.com/products/jndi/tutorial/index.html]
OpenLDAP Project [http://www.openldap.org/]
LDAP and X.500 Protocol Web Resources [http://andrew2.andrew.cmu.edu/cyrus/email/standards-X500.html]

[TOP]

Java/Mobile Code Security

Netscape Object Signing Overview [http://developer.netscape.com/docs/manuals/signedobj/overview.html]
Java security FAQ (Javasoft) [http://www.javasoft.com/sfaq/]
Java security FAQ (Unofficial answers from the Princeton Secure Internet Programming Team) [http://www.cs.princeton.edu/sip/java-faq.html]
Java security hotlist [http://www.rstcorp.com/javasecurity/links.html]
Java Cryptography and Security Project [http://security.dstc.edu.au/projects/java/index.html]
Princeton's Secure Internet Programming Laboratory [http://www.cs.princeton.edu/sip/]

[TOP]

Law and Security

World Trade Organization (WTO) [http://www.wto.org/]
PKI Law [http://www.pkilaw.com/]
US Government E-commerce Web Site [http://www.ecommerce.gov/]
American Bar Association - Science and Technology Law [http://www.abanet.org/scitech/]
Global Internet Liberty Campaign Crypto Law Survey [http://www.gilc.org/]
Commercial Encryption Export Controls, Bureau of Export Administration, Department of Commerce Web Site [http://www.bxa.doc.gov/Encryption/]
Electronic Commerce - Legal Aspects [http://europa.eu.int/ISPO/ecommerce/legal/legal.html]
United Nations Commission on International Trade Law (UNCITRAL) [http://www.uncitral.org/en-index.htm]
U.S. Dept. of Commerce, Bureau of Export Administration Home Page [http://www.bxa.doc.gov/]
Crypto Law Survey [http://cwis.kub.nl/~frw/people/koops/lawsurvy.htm]
Electronic Commerce Promotion Council of Japan [http://www.ecom.or.jp/ecom_e/]

[TOP]

XML

XML Digital Signatures ((IETF xmldsig working group) [http://www.ietf.org/html.charters/xmldsig-charter.html]

XML Security Suite -IBM [http://www-106.ibm.com/developerworks/library/xmlsecuritysuite/]

[TOP]

Resourses

The Internet Engineering Task Force(IETF) [http://www.ietf.org/]
The IETF Security Area [http://web.mit.edu/network/ietf/sa/]
IEEE Computer Society Technical Committee on Security and Privacy [http://www.ieee-security.org/]
Cipher - IEEE Computer Society Technical Committee on Security and Privacy [http://www.ieee-security.org/cipher.html]
World Wide Web Consortium's (W3C) Security page [http://www.w3.org/pub/WWW/Security/]
International Telecommunication Union (ITU) [http://www.itu.int/home/index.html]
Professor Ronald L. Rivest bookmarks [http://theory.lcs.mit.edu/~rivest/crypto-security.html]
RSA Data Security [http://www.rsasecurity.com/]
INFOSEC - Criteria and Methods of Evaluations of Information Systems [http://www.cordis.lu/infosec/]
Netscape's Security Resources [http://developer.netscape.com/docs/manuals/security/secrs/secrs.htm]
Microsoft security [http://www.microsoft.com/security/]
Netscape Security: Open-Standard Solutions for the Enterprise [http://developer.netscape.com/docs/manuals/security/scwp/]
SURFnet Security Service [http://www.surfnet.nl/en/services/beveiliging/]
SecurityFocus.com [http://www.securityfocus.com/]
COAST Security Hotlist [http://www.cs.purdue.edu/coast/hotlist/]
Cryptography Research - Home Page [http://www.cryptography.com/]

[TOP]