<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.moskowitz-drip-dki" target="https://datatracker.ietf.org/doc/html/draft-moskowitz-drip-dki-09">
   <front>
      <title>The DRIP DET public Key Infrastructure</title>
      <author initials="R." surname="Moskowitz" fullname="Robert Moskowitz">
         <organization>HTT Consulting</organization>
      </author>
      <author initials="S. W." surname="Card" fullname="Stuart W. Card">
         <organization>AX Enterprize, LLC</organization>
      </author>
      <date month="October" day="23" year="2023" />
      <abstract>
	 <t>   The DRIP Entity Tag (DET) public Key Infrastructure (DKI) is a
   specific variant of classic Public Key Infrastructures (PKI) where
   the organization is around the DET, in place of X.520 Distinguished
   Names.  Further, the DKI uses DRIP Endorsements in place of X.509
   certificates for establishing trust within the DKI.

   There are two X.509 profiles for shadow PKI behind the DKI, with many
   of their X.509 fields mirroring content in the DRIP Endorsements.
   This PKI can at times be used where X.509 is expected and non-
   constrained communication links are available that can handle their
   larger size.

   C509 (CBOR) encoding of all X.509 certificates are also provided as
   an alternative for where there are gains in reduced object size.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-moskowitz-drip-dki-09" />
   
</reference>
