Skip to content

Validation Service (VSS)

The Validation Service is an implementation of a REST API designed for complex X.509 certificate path validation. It is intended as a modern alternative to legacy SCVP translation utilities, providing a centralized point for enforcing identity assurance policies.

Core Objectives

  • Policy Enforcement: Evaluation of X.509 paths against specific policy OIDs (e.g., NIST SP 800-63-3 assurance levels).
  • Trust Anchoring: Explicit anchoring to Federal roots (currently FCPCAG2).
  • Centralization: Removing the burden of complex PKI validation logic from individual application layers.