Question

Describe what is meant by a Certificate Policy and a Certificate Practice Statement. Your answer should clarify the differences between the two and explain the major goal of the Certificate Policy and Certificate Practice Statement.

Answer 1

Certificate Policy (CP)

A Certificate Policy depicts the standards under which a specific endorsement is given. These incorporate the standards administering age, dispersion, and organization of the Digital Certificates, and the approaches to be followed in case of any conceivable Key trade-offs. A CA may characterize an alternate CP for each unique sort of Certificate it issues. This is very basic practice – particularly where a CA applies various principles in checking the accreditations of various classes of Certificate Holders. Declaration Policies regularly offer unequivocal expressions on the CA's risk to a Relying Party if data in an endorsement is demonstrated to not be right. Depending Parties should check the CP before choosing whether or not to confide in the Certificate. It is imperative to take note of that, numerous financially accessible PKI empowered items don't permit clients to design a rundown of confided in Certificate Policies similarly that they permit clients to arrange a rundown of confided in CAs. Consequently a few associations, for example, Verisign regularly utilize diverse sub-CAs to give authentications under various arrangements (basically having one sub-CA per strategy).

Certification Practice Statement (CPS)

The CPS contains an increasing point by point portrayal of the practices and methods a CA follows when giving and overseeing Digital Certificates. It is custom-fitted to the association's PKI working condition and authoritative structure.

Where a CP characterizes what the standards are, the CPS depicts how to actualize those principles. An announcement of the practices which a CA utilizes in giving declarations. An accreditation practice proclamation is a point by point explanation by a CA with respect to its practices, that concept should be comprehended and counseled by supporters and testament clients (depending parties).

The primary difference between CPs and CPSs can along these lines be summed up as follows:

• A PKI utilizes a CP to build up prerequisites that state what members inside it must do. A solitary CA or association can utilize a CPS to uncover how it meets the necessities of a CP or how it executes its practices and controls.
• A CP encourages interoperation through cross-accreditation, one-sided affirmation, or different methods. Accordingly, it is expected to cover different CAs. Conversely, a CPS is an announcement of a solitary CA or association. Its motivation isn't to encourage interoperation (since doing so is the capacity of a CP).
• A CPS is commonly more nitty-gritty than a CP and determines how the CA meets the prerequisites indicated in the at least one CPs under which it issues endorsements.