I-D Action: draft-thallapelly-oasnt-enforce-01.txt
| Newsgroups | gmane.ietf.announce |
|---|---|
| Message-ID | <178679165216.113890.734809929635690594@dt-datatracker-7c6ddbc678-86d5j> |
Internet-Draft draft-thallapelly-oasnt-enforce-01.txt is now available. Title: OASNT-ENFORCE: Request-Bound Enforcement of Attested Action Authorization Author: Arun Thallapelly Name: draft-thallapelly-oasnt-enforce-01.txt Pages: 25 Dates: 2026-08-15 Abstract: This document profiles the enforcement of OASNT tokens at the point of execution. It defines the OASNT-Token HTTP field, the rules by which an enforcement point derives the observed request from the octets it will itself forward, a verification procedure for relying parties that hold no request-to-action mapping, uniform refusal behavior, and the set of refusals a conforming enforcement point is required to produce. It further defines an optional grp claim and an exclusivity ledger, by which a set of tokens issued from one human confirmation is made spendable only once between them, and fixes which relying party in a deployment performs that consumption. An enforcement point conforming to this profile makes a human approval a precondition of execution for the requests it fronts, without any change to the protected service. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-thallapelly-oasnt-enforce/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-thallapelly-oasnt-enforce-01.html A diff from the previous version is available at: https://author-tools.ietf.org/iddiff?url2=draft-thallapelly-oasnt-enforce-01 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ I-D-Announce mailing list -- [email protected] To unsubscribe send an email to [email protected]