%% You should probably cite draft-helmprotocol-tttps-08 instead of this revision.
@techreport{helmprotocol-tttps-06,
    number =    {draft-helmprotocol-tttps-06},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-helmprotocol-tttps/06/},
    author =    {장동호},
    title =     {{The TLS TimeToken Secure Protocol (tttps://)}},
    pagetotal = 59,
    year =      2026,
    month =     jul,
    day =       1,
    abstract =  {This document specifies the TLS TimeToken Secure Protocol (tttps://), a protocol extension that augments TLS 1.3 {[}RFC8446{]} with cryptographically verifiable temporal ordering. TTTPS is a blockchain-independent, general-purpose time-proof protocol that spans deployment environments from terrestrial networks to deep-space and Space-Air-Ground Integrated Network (SAGIN) relays, using a single opaque context identifier and a propagation-delay- adaptive tier to cover the full range from sub-100ms terrestrial ordering to multi-minute interplanetary light-time. Internet infrastructure assumes that channels are passive: noise is random and channel operators have no ordering preferences. This assumption is structurally violated when ordering has economic value -- NTP servers, BGP routing authorities, DNS resolvers, and transaction sequencers all have incentive to misrepresent ordering. This document formalises the problem as the Strategic Channel Controller Problem (SCCP), absent from classical information theory. Temporal ordering attacks are structurally more acute for autonomous AI agents than for human participants: as agent reaction times converge toward symmetry, ordering advantage can no longer be earned through superior human latency. No existing protocol -- including O(n\textasciicircum{}2) BFT consensus, which tolerates but does not eliminate Byzantine nodes -- provides a cryptographic pre-ingestion defense for this case. TTTPS introduces Proof-of-Time (PoT): a multi-source synthesised timestamp protected by the GRG integrity pipeline (Golomb-Rice -\textgreater{} Reed-Solomon -\textgreater{} Golay(23,12,7) -\textgreater{} HMAC), whose stage ordering is mathematically necessary (Theorems 1-3 of the companion paper {[}POT2026{]}). PoT achieves Byzantine temporal elimination at O(1) per record, independent of network size. An AdaptiveSwitch mechanism makes ordering manipulation economically self-defeating; the equilibrium threshold is derived in closed form and empirically calibrated from deployed data (Section 7.4). A reference deployment produces 70,000+ verified records; 55\% are generated by autonomous AI agents -- an unanticipated finding that confirms the structural severity of the ordering problem in agent economies. This document has Experimental status. The GRG pipeline specification will be published upon conclusion of pending patent proceedings (Section 13). Discussion Note This note is to be removed before publishing as an RFC. This document is being discussed on the dispatch@ietf.org mailing list. The authors have submitted a BoF request for IETF 126 (Vienna, July 2026) targeting the DISPATCH working group. Comments and participation are welcome. Changes from -05: * Header: revision -05 -\textgreater{} -06; dates updated (30 June 2026). * AdaptiveSwitch (Section 7): added a new subsection "Oracle Confidence Gating (G-Score)" specifying that oracle agreement is gated by a normalised-entropy confidence metric (the G-Score, G(p) = H(p) / log n), and describing the optional von Neumann (density- matrix) extension S(rho) = -Tr(rho log rho) that captures inter- source correlation (collusion) which marginal Shannon entropy cannot see. The von Neumann form is specified as tier-adaptive: applied in the deep-space / low-source-count regime where collusion is acute and the source count is small enough to bound the eigendecomposition cost, while terrestrial tiers use the linear-cost Shannon form. This is an abstract mechanism specification; weighting formulae and pipeline internals are out of scope. * Implementation Status (Section 14): updated the Formal Verification Artifacts subsection to record that the Shannon G-Score and its von Neumann extension are implemented and unit- tested with corresponding sorry-free Lean 4 formalisations, and noted honestly that live AdaptiveSwitch integration of the oracle- confidence gate is pending source time-value distribution instrumentation (the metrics are specified and tested but not yet wired into the live switch). * Intellectual Property (Section 13): removed the licensing-terms sentence; per ISE guidance, IPR licensing commitments are handled by the separate IPR disclosure process and not stated in the draft body. The section now records only the technical IPR facts (pending patent; independent implementation paths via the abstract interface and published primitives). * IANA Considerations: added a new subsection "URI Scheme Registration" recording that IANA has provisionally registered the "tttps" URI scheme {[}RFC7595{]} in the provisional URI Schemes registry, and added {[}RFC7595{]} to the normative references. * Section cross-reference consistency: corrected prose references that named the Implementation Status section and its subsections by their -03 numbers. In the rendered document the Implementation Status section is Section 14 (subsections 14.1-14.4) and References is Section 15; running text now matches these rendered numbers (formerly "Section 15.2", "Section 15.3", "Section 15.4", and "New Section 15: Implementation Status"). * Changelog wording: the Implementation Status section was first added in -03, not -04; the "New Section" wording in earlier changelog entries has been retained only where historically accurate and the stale section numbers corrected. * Interested Parties (Section 14.4): replaced the bracketed editorial placeholder with a plain-language status statement reflecting that no interested-party statements have been received at the time of this revision. * Apart from the IANA URI Scheme Registration subsection noted above, no other normative or descriptive content changed; all remaining -04 text is carried forward verbatim. Changes from -03: * Header: revision -03 -\textgreater{} -04; dates updated (23 June 2026 / Expires 25 December 2026). * New subsection Formal Verification Artifacts (Section 14.3 in the rendered document) -- records the publicly available kenoslean PyPI package (version 0.1.0) and the Lean 4 / Mathlib formalisation of the G-Score / InsufficientKnowledge confidence primitive (sorry-free). (Interested Parties became Section 14.4.) * New Appendix E: Motivating Use Case -- a regulated therapeutic- design data-integrity scenario distinguishing record integrity (TTTPS) from computation integrity (formal verification), aligned with FDA 21 CFR Part 11. * References: {[}I-D.ietf-ntp-roughtime{]} (Roughtime, the protocol the D\_chain mechanism depends on) and {[}I-D.ietf-rats-msg-wrap{]} (CMW) added as informative references; both are in the RFC Editor Queue as of June 2026 (status verified on the IETF Datatracker). {[}KENOSLEAN{]} and {[}CFR-21-Part-11{]} added. Changes from -02: * New Section 1.1: "Why This Protocol, Why Now" * New Section 2: Use Cases (satellite, 5G, financial, AI agents) * New Section 4.2: SS7 Legacy Infrastructure as a Strategic Channel Controller Problem Instance * New Section 10.8: Path Manipulation Attack Scenarios (3 scenarios) * New Section 10.9: Trust Model and Key Compromise Resilience * New Implementation Status section (RFC 7942; Section 14 in the rendered document) * Section 5.4 Verification: future-timestamp check, TLS binding step * References: SS7-VULN, GSMA-SS7, GPS-SPOOF, RFC6962, RFC9557},
}