Implementing Multi-Perspective Issuance Corroboration (MPIC) on AWS

Abstract

This project aims to implement Multi-Perspective Issuance Corroboration (MPIC) using Amazon’s cloud compute service AWS to run remote vantage points. The goal is to implement MPIC in a way that is quickly useful to smaller Certificate Authorities (CA). The open-source MPIC implementation uses an open API Gate- way to handle CA requests. The API allows CA’s to specify DNS or HTTP based validation as well as the number of perspectives, their locations, and how many perspective constitute quorum. Using three perspectives both validation methods have a total latency < 3s. This implementation will assist smaller CAs in quickly implementing MPIC. Additionally, making MPIC a minimum CA requirement is in CA Browser Forum ballot SC-067. This implementation will make passing this ballot easier as it reduced the burden on smaller CAs.