@techreport{ietf-anima-brski-prm-23,
    number =    {draft-ietf-anima-brski-prm-23},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-ietf-anima-brski-prm/23/},
    author =    {Steffen Fries and Thomas Werner and Eliot Lear and Michael Richardson},
    title =     {{BRSKI with Pledge in Responder Mode (BRSKI-PRM)}},
    pagetotal = 123,
    year =      2025,
    month =     jun,
    day =       3,
    abstract =  {This document defines enhancements to Bootstrapping Remote Secure Key Infrastructure (BRSKI, RFC8995) as BRSKI with Pledge in Responder Mode (BRSKI-PRM). BRSKI-PRM supports the secure bootstrapping of devices, referred to as pledges, into a domain where direct communication with the registrar is either limited or not possible at all. To facilitate interaction between a pledge and a domain registrar the registrar-agent is introduced as new component. The registrar-agent supports the reversal of the interaction model from a pledge-initiated mode, to a pledge-responding mode, where the pledge is in a server role. To establish the trust relation between pledge and registrar, BRSKI-PRM relies on object security rather than transport security. This approach is agnostic to enrollment protocols that connect a domain registrar to a key infrastructure (e.g., domain Certification Authority).},
}