<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.premont-lamps-drl-stapling" target="https://datatracker.ietf.org/doc/html/draft-premont-lamps-drl-stapling-00">
   <front>
      <title>TLS Extension for Distributed Revocation Ledger (DRL) Stapling using a Sparse Merkle Tree</title>
      <author initials="A." surname="PREMONT" fullname="Arthur PREMONT">
         <organization>IP Paris</organization>
      </author>
      <author initials="H." surname="Afifi" fullname="Hossam Afifi">
         <organization>Telecom SudParis</organization>
      </author>
      <date month="July" day="6" year="2026" />
      <abstract>
	 <t>   Managing certificate revocation remains a recurring challenge in the
   Web Public Key Infrastructure (WebPKI).  Existing solutions such as
   Certificate Revocation Lists (CRLs) and the Online Certificate Status
   Protocol (OCSP) involve compromises in terms of propagation latency,
   availability, and user privacy.  With the planned deprecation of OCSP
   by some major Certificate Authorities (CAs), there is renewed
   interest in alternatives.

   This document specifies a decentralized certificate revocation
   architecture based on a Distributed Revocation Ledger (DRL) managed
   collectively by CAs.  The ledger state is maintained as a Sparse
   Merkle Tree (SMT) in which only revoked certificates occupy non-
   default leaves, so that a valid certificate is attested by a compact
   non-membership proof and no prior registration of valid certificates
   is required.  This document further defines a new Transport Layer
   Security (TLS) extension enabling &quot;DRL Stapling&quot;, which allows a
   server to provide a client with a cryptographic proof of a
   certificate&#x27;s status, consisting of a Sparse Merkle audit path and an
   M-of-N threshold signature from the CA consortium.  The approach
   builds on the Revocation Transparency proposal of Laurie and Kasper
   and on subsequent formalizations of Sparse Merkle Trees; its novel
   contributions are the decentralized threshold-signature trust model
   with deterministic finality and the concrete TLS wire format.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-premont-lamps-drl-stapling-00" />
   
</reference>
