I-D Action: draft-sharif-x509-agent-identity-profile-02.txt

[email protected] Sun, 26 Jul 2026 14:43:59 -0700
Newsgroups gmane.ietf.announce
Message-ID <178510223927.1047255.2681500352276413070@dt-datatracker-d4d6ff9d9-ql5mb>
Internet-Draft draft-sharif-x509-agent-identity-profile-02.txt is now
available.

   Title:   X.509 Certificate Profile for Autonomous AI Agent Identity
   Author:  Raza Sharif
   Name:    draft-sharif-x509-agent-identity-profile-02.txt
   Pages:   22
   Dates:   2026-07-26

Abstract:

   This document defines an X.509 certificate profile for identifying
   autonomous AI agents.  It specifies a new X.509v3 extension,
   AgentIdentity, that encodes agent-specific metadata within a
   standard X.509 certificate, including agent trust level,
   operational capabilities, delegation constraints, owner attribution,
   and revocation control endpoints.

   The profile enables certificate authorities (CAs) to issue
   interoperable agent identity certificates that any relying party
   can parse, validate, and enforce, regardless of the issuing CA or
   the platform that provisioned the agent.

   The design builds on existing PKI infrastructure (RFC 5280), SPIFFE
   Verifiable Identity Documents (SPIFFE SVIDs), and the MCPS
   cryptographic signing layer (draft-sharif-mcps-secure-mcp).  It
   does not require changes to X.509v3 certificate parsing or to
   existing CA issuance pipelines beyond supporting a new non-critical
   extension.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-sharif-x509-agent-identity-profile/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-sharif-x509-agent-identity-profile-02

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-sharif-x509-agent-identity-profile-02

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]