I-D Action: draft-okutomi-session-bound-agent-identity-06.txt
[email protected] Thu, 30 Jul 2026 03:28:30 -0700
| Newsgroups | gmane.ietf.announce |
|---|---|
| Message-ID | <178540731061.1422160.7111312538191207133@dt-datatracker-d4d6ff9d9-fsx7d> |
Internet-Draft draft-okutomi-session-bound-agent-identity-06.txt is now available. Title: A Verifier-Side Acceptance Profile for Channel-Bound Agent Identity and Authorization Author: Akira Okutomi Name: draft-okutomi-session-bound-agent-identity-06.txt Pages: 48 Dates: 2026-07-30 Abstract: This document defines a verifier-side acceptance profile for channel- bound Agent identity and authorization. It addresses context diversion, where cryptographically valid material is accepted for a different service, tenant, actor, task, target, delegation, or authority boundary than the verifier intended. A verifier accepts an actor only when a verified authority grant, holder-of-key proof, accepted channel instance, freshness and replay state, any required attestation result, and verifier-local policy all describe the same intended interaction. Protocol-specific wire formats and deployment choices are left to binding profiles. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-okutomi-session-bound-agent-identity/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-okutomi-session-bound-agent-identity-06.html A diff from the previous version is available at: https://author-tools.ietf.org/iddiff?url2=draft-okutomi-session-bound-agent-identity-06 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ I-D-Announce mailing list -- [email protected] To unsubscribe send an email to [email protected]