Use of Short-Term, Automatically-Renewed (STAR) Certificates to Delegate Authority over Web Sites
Oscar de Dios, Thomas Fossati, Y. Sheffer, Diego R. Lopez · 2017
This memo proposes two mechanisms that work in concert to allow a third party (e.g., a content delivery network) to terminate TLS sessions on behalf of a domain name owner (e.g., a content provider). The proposed mechanisms are: