I-D Action: draft-schrock-ep-authority-introduction-02.txt
[email protected] Tue, 28 Jul 2026 00:02:45 -0700
| Newsgroups | gmane.ietf.announce |
|---|---|
| Message-ID | <178522216502.1222813.4515691793500804646@dt-datatracker-d4d6ff9d9-fsx7d> |
Internet-Draft draft-schrock-ep-authority-introduction-02.txt is now available. Title: Authority Documents and Scoped Authority for Agent-Action Evidence Author: Iman Schrock Name: draft-schrock-ep-authority-introduction-02.txt Pages: 12 Dates: 2026-07-28 Abstract: Signature verification answers whether a key produced an artifact. It does not answer why a relying party accepts that key, or whether the key holder had authority for the action. This document specifies two composable artifacts. An Authority Document introduces and rotates an organization's evidence-issuing keys through a signed, hash-chained sequence. A Scoped Authority Proof records the authority held by a subject at a registry snapshot, including role, action scope, material limits, policy binding, validity, and revocation status. A relying party evaluates both artifacts under its own pinned trust inputs and policy. The design does not make a self-presented key authoritative, does not turn log inclusion or domain control into automatic trust, and does not equate a valid signature with permission to act. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-schrock-ep-authority-introduction/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-schrock-ep-authority-introduction-02.html A diff from the previous version is available at: https://author-tools.ietf.org/iddiff?url2=draft-schrock-ep-authority-introduction-02 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ I-D-Announce mailing list -- [email protected] To unsubscribe send an email to [email protected]