<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.li-ztcpp-network-infra-consideration" target="https://datatracker.ietf.org/doc/html/draft-li-ztcpp-network-infra-consideration-00">
   <front>
      <title>Consideration of Applying Zero Trust Philosophy in Network Infrastructure</title>
      <author initials="X." surname="Li" fullname="Xueting Li">
         <organization>China Telecom</organization>
      </author>
      <author initials="A." surname="Wang" fullname="Aijun Wang">
         <organization>China Telecom</organization>
      </author>
      <author initials="" surname="iqjie@mail.ustc.edu.cn" fullname="iqjie@mail.ustc.edu.cn">
         <organization>China Telecom</organization>
      </author>
      <author initials="W." surname="Li" fullname="Wenhao Li">
         <organization>China Telecom</organization>
      </author>
      <date month="May" day="13" year="2026" />
      <abstract>
	 <t>   Network security has traditionally relied on a perimeter-centric
   model, assuming that traffic originating within the network can be
   implicitly trusted.  This model is fundamentally challenged by
   modern, highly distributed, and software-driven network environments
   where internal compromise is a realistic and high-impact threat
   scenario.  This document examines the critical limitations of edge-
   only network protection and the systemic risks that arise from
   insufficient internal validation.  Once the network perimeter is
   bypassed, the absence of internal protection mechanisms facilitates
   rapid lateral movement, impersonation of network entities, and
   interference with critical control and management functions.

   The document argues that Zero Trust (ZT) principles, which mandate
   continuous, dynamic verification of all entities and communications
   regardless of network location, are necessary to address contemporary
   threat models.  Deploying ZT-aligned network protection mechanisms
   beyond the network edge is essential to build resilient,
   controllable, and trustworthy networks.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-li-ztcpp-network-infra-consideration-00" />
   
</reference>
