Use of Short-Term, Automatically-Renewed (STAR) Certificates to address the LURK problem
Oscar de Dios, Thomas Fossati, Y. Sheffer, Diego R. Lopez · 2016
This memo proposes two mechanisms that work in concert to address the LURK problem statement, allowing a third party (e.g., a content delivery network) to terminate TLS sessions on behalf of a domain name owner (e.g., a content provider). The proposed mechanisms are: