1
$\begingroup$

PFX is commonly used as a synonym of PKCS#12 certificate stores. However, I've never seen an explanation why these stores are called PFX (on Microsoft platforms) in multiple articles, including those of Microsoft. I can think up some names for what is seemingly an acronym, but "protected file X.509" doesn't seem to work well.

Does anybody have any idea what it actually stands for?

$\endgroup$
0

1 Answer 1

1
$\begingroup$

On my Windows 7 machine the .pfx file-type is called:

Personal Information Exchange

I'm not sure why this turned into .pfx, but guess that they wanted to avoid .pix, because it sounds like an image format.


The acronym can also be found in MSDN where it describes a set of functions in an API for creating PFX files.

$\endgroup$
3
  • $\begingroup$ Do you know if - originally - is could handle more data than just PKCS#12? Because it seems a bit strange to call this "exchange"; if it contains the private key it should probably not be exchanged with anybody, even if encrypted using a password. $\endgroup$
    – Maarten Bodewes
    Commented Dec 18, 2017 at 13:29
  • $\begingroup$ Maybe it is intended for exchanging private keys between applications, e.g. a key storage application and an S/MIME mail client that for hysterical raisins can't talk to the key storage application to sign on its behalf? $\endgroup$ Commented Dec 18, 2017 at 16:11
  • $\begingroup$ Could well be, it is certainly possible, and it is old enough for those kind of shenanigans. $\endgroup$
    – Maarten Bodewes
    Commented Dec 19, 2017 at 8:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.