The DRIP DET public Key Infrastructure
draft-moskowitz-drip-dki-09
| Document | Type |
Replaced Internet-Draft
(drip WG)
Expired & archived
|
|
|---|---|---|---|
| Authors | Robert Moskowitz , Stuart W. Card | ||
| Last updated | 2023-12-19 (Latest revision 2023-10-23) | ||
| Replaced by | draft-ietf-drip-dki | ||
| RFC stream | Internet Engineering Task Force (IETF) | ||
| Intended RFC status | (None) | ||
| Formats | |||
| Additional resources | Mailing list discussion | ||
| Stream | WG state | Adopted for WG Info Only | |
| Document shepherd | (None) | ||
| IESG | IESG state | Replaced by draft-ietf-drip-dki | |
| Consensus boilerplate | Unknown | ||
| Telechat date | (None) | ||
| Responsible AD | (None) | ||
| Send notices to | (None) |
This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:
Abstract
The DRIP Entity Tag (DET) public Key Infrastructure (DKI) is a specific variant of classic Public Key Infrastructures (PKI) where the organization is around the DET, in place of X.520 Distinguished Names. Further, the DKI uses DRIP Endorsements in place of X.509 certificates for establishing trust within the DKI. There are two X.509 profiles for shadow PKI behind the DKI, with many of their X.509 fields mirroring content in the DRIP Endorsements. This PKI can at times be used where X.509 is expected and non- constrained communication links are available that can handle their larger size. C509 (CBOR) encoding of all X.509 certificates are also provided as an alternative for where there are gains in reduced object size.
Authors
Robert Moskowitz
Stuart W. Card
(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)