[saag] Re: ZTNP / ZTIP – attestation-gated authoriza tion & intent-bound delegation (seeking venue guidance)
"Aijun Wang" <[email protected]> Tue, 28 Apr 2026 10:04:53 +0800
| Newsgroups | gmane.ietf.saag,gmane.ietf.oauth |
|---|---|
| Message-ID | <[email protected]> |
This is a multipart message in MIME format. --===============7159247397078518894== Content-Type: multipart/alternative; boundary="----=_NextPart_000_0016_01DCD6F6.75F32480" Content-Language: zh-cn This is a multipart message in MIME format. ------=_NextPart_000_0016_01DCD6F6.75F32480 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi, Jake: =20 I think your work is aligned well with the aim of ZTPP(Zero Trust = Control and Policy Protocol) efforts. And, we are now updating the = charter(https://github.com/ietf-ztcpp/Charter/blob/main/Charter.md) for = the future BoF/Side Meeting in IETF 126. =20 If you are interested, please subscribe the mailing list at = https://mailman3.ietf.org/mailman3/lists/ztcpp.ietf.org/ and contribute = your thoughts to refine the charter? =20 Aijun =20 From: [email protected] [mailto:[email protected]] = On Behalf Of Jake Miller Sent: Tuesday, April 28, 2026 6:50 AM To: [email protected]; [email protected] Subject: [saag] ZTNP / ZTIP =E2=80=93 attestation-gated authorization & = intent-bound delegation (seeking venue guidance) =20 Hello, I=E2=80=99ve recently submitted two individual Internet-Drafts that = explore gaps we=E2=80=99re encountering as systems become more = agent-driven and involve multi-hop delegation: ZTNP (Zero-Trust Negotiation Protocol) https://datatracker.ietf.org/doc/draft-miller-ztnp/ ZTIP (Zero-Trust Intent Protocol) https://datatracker.ietf.org/doc/draft-miller-ztip/ At a high level: * ZTNP looks at how to bind attestation (or posture) to authorization at = session establishment, including channel binding and local policy = evaluation by the relying party.=20 * ZTIP explores how to bind authorization to structured user intent = across delegation chains, with explicit scope monotonicity and = end-to-end verifiability.=20 The drafts explore a potential gap between: * attestation (e.g., RATS-style evidence/results), and=20 * authorization mechanisms (OAuth / GNAP) This is particularly true in scenarios where actions are delegated = across multiple agents and are susceptible to prompt injection or = confused deputy patterns. These drafts are intended as early contributions. I=E2=80=99m interested = in critical feedback, especially on: * whether the problem framing resonates=20 * how this relates to existing work in OAuth, GNAP, and RATS=20 * and whether there is an appropriate venue (existing WG or otherwise) = for further discussion=20 Thank you for any feedback or direction. Best regards, Jake Miller [email protected] <mailto:[email protected]>=20 ------=_NextPart_000_0016_01DCD6F6.75F32480 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta = http-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8"><meta = name=3DGenerator content=3D"Microsoft Word 15 (filtered = medium)"><style><!-- /* Font Definitions */ @font-face {font-family:Wingdings; panose-1:5 0 0 0 0 0 0 0 0 0;} @font-face {font-family:=E5=AE=8B=E4=BD=93; panose-1:2 1 6 0 3 1 1 1 1 1;} @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:=E7=AD=89=E7=BA=BF; panose-1:2 1 6 0 3 1 1 1 1 1;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} @font-face {font-family:"\@=E5=AE=8B=E4=BD=93"; panose-1:2 1 6 0 3 1 1 1 1 1;} @font-face {font-family:"\@=E7=AD=89=E7=BA=BF"; panose-1:2 1 6 0 3 1 1 1 1 1;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0cm; margin-bottom:.0001pt; font-size:12.0pt; font-family:=E5=AE=8B=E4=BD=93;} a:link, span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;} p {mso-style-priority:99; mso-margin-top-alt:auto; margin-right:0cm; mso-margin-bottom-alt:auto; margin-left:0cm; font-size:12.0pt; font-family:=E5=AE=8B=E4=BD=93;} p.msonormal0, li.msonormal0, div.msonormal0 {mso-style-name:msonormal; mso-margin-top-alt:auto; margin-right:0cm; mso-margin-bottom-alt:auto; margin-left:0cm; font-size:12.0pt; font-family:=E5=AE=8B=E4=BD=93;} span.gmail-ms-05 {mso-style-name:"gmail-ms-0\.5";} span.EmailStyle21 {mso-style-type:personal-reply; font-family:=E7=AD=89=E7=BA=BF; color:#1F497D;} .MsoChpDefault {mso-style-type:export-only;} @page WordSection1 {size:612.0pt 792.0pt; margin:72.0pt 90.0pt 72.0pt 90.0pt;} div.WordSection1 {page:WordSection1;} /* List Definitions */ @list l0 {mso-list-id:511140736; mso-list-template-ids:-698213708;} @list l0:level1 {mso-level-number-format:bullet; mso-level-text:=EF=82=B7; mso-level-tab-stop:36.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l0:level2 {mso-level-number-format:bullet; mso-level-text:o; mso-level-tab-stop:72.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:"Courier New"; mso-bidi-font-family:"Times New Roman";} @list l0:level3 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:108.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l0:level4 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:144.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l0:level5 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:180.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l0:level6 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:216.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l0:level7 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:252.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l0:level8 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:288.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l0:level9 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:324.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l1 {mso-list-id:746807599; mso-list-template-ids:824714820;} @list l1:level1 {mso-level-number-format:bullet; mso-level-text:=EF=82=B7; mso-level-tab-stop:36.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l1:level2 {mso-level-number-format:bullet; mso-level-text:o; mso-level-tab-stop:72.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:"Courier New"; mso-bidi-font-family:"Times New Roman";} @list l1:level3 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:108.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l1:level4 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:144.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l1:level5 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:180.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l1:level6 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:216.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l1:level7 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:252.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l1:level8 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:288.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l1:level9 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:324.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l2 {mso-list-id:1818645799; mso-list-template-ids:339748894;} @list l2:level1 {mso-level-number-format:bullet; mso-level-text:=EF=82=B7; mso-level-tab-stop:36.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l2:level2 {mso-level-number-format:bullet; mso-level-text:o; mso-level-tab-stop:72.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:"Courier New"; mso-bidi-font-family:"Times New Roman";} @list l2:level3 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:108.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l2:level4 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:144.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l2:level5 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:180.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l2:level6 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:216.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l2:level7 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:252.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l2:level8 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:288.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} @list l2:level9 {mso-level-number-format:bullet; mso-level-text:=EF=82=A7; mso-level-tab-stop:324.0pt; mso-level-number-position:left; text-indent:-18.0pt; mso-ansi-font-size:10.0pt; font-family:Wingdings;} ol {margin-bottom:0cm;} ul {margin-bottom:0cm;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--></head><body lang=3DZH-CN link=3Dblue = vlink=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><span = lang=3DEN-US style=3D'font-family:=E7=AD=89=E7=BA=BF;color:#1F497D'>Hi, = Jake:<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-family:=E7=AD=89=E7=BA=BF;color:#1F497D'><o:p> </o:p><= /span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-family:=E7=AD=89=E7=BA=BF;color:#1F497D'>I think your work = is aligned well with the aim of ZTPP(Zero Trust Control and Policy = Protocol) efforts.<o:p></o:p></span></p><p class=3DMsoNormal><span = lang=3DEN-US style=3D'font-family:=E7=AD=89=E7=BA=BF;color:#1F497D'>And, = we are now updating the charter(<a = href=3D"https://github.com/ietf-ztcpp/Charter/blob/main/Charter.md">https= ://github.com/ietf-ztcpp/Charter/blob/main/Charter.md</a>) for the = future BoF/Side Meeting in IETF 126.<o:p></o:p></span></p><p = class=3DMsoNormal><span lang=3DEN-US = style=3D'font-family:=E7=AD=89=E7=BA=BF;color:#1F497D'><o:p> </o:p><= /span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-family:=E7=AD=89=E7=BA=BF;color:#1F497D'>If you are = interested, please subscribe the mailing list at <a = href=3D"https://mailman3.ietf.org/mailman3/lists/ztcpp.ietf.org/">https:/= /mailman3.ietf.org/mailman3/lists/ztcpp.ietf.org/</a> and contribute = your thoughts to refine the charter?<o:p></o:p></span></p><p = class=3DMsoNormal><span lang=3DEN-US = style=3D'font-family:=E7=AD=89=E7=BA=BF;color:#1F497D'><o:p> </o:p><= /span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-family:=E7=AD=89=E7=BA=BF;color:#1F497D'>Aijun<o:p></o:p></= span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-family:=E7=AD=89=E7=BA=BF;color:#1F497D'><o:p> </o:p><= /span></p><p class=3DMsoNormal><b><span lang=3DEN-US = style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span><= /b><span lang=3DEN-US = style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif'> = [email protected] [mailto:[email protected]] <b>On = Behalf Of </b>Jake Miller<br><b>Sent:</b> Tuesday, April 28, 2026 6:50 = AM<br><b>To:</b> [email protected]; [email protected]<br><b>Subject:</b> [saag] = ZTNP / ZTIP =E2=80=93 attestation-gated authorization & intent-bound = delegation (seeking venue guidance)<o:p></o:p></span></p><p = class=3DMsoNormal><span = lang=3DEN-US><o:p> </o:p></span></p><div><div><p><span = lang=3DEN-US>Hello,<o:p></o:p></span></p><p><span = lang=3DEN-US>I=E2=80=99ve recently submitted two individual = Internet-Drafts that explore gaps we=E2=80=99re encountering as systems = become more agent-driven and involve multi-hop = delegation:<o:p></o:p></span></p><p><span lang=3DEN-US>ZTNP (Zero-Trust = Negotiation Protocol)<br><a = href=3D"https://datatracker.ietf.org/doc/draft-miller-ztnp/">https://data= tracker.ietf.org/doc/draft-miller-ztnp/</a><o:p></o:p></span></p><p><span= lang=3DEN-US>ZTIP (Zero-Trust Intent Protocol)<br><a = href=3D"https://datatracker.ietf.org/doc/draft-miller-ztip/">https://data= tracker.ietf.org/doc/draft-miller-ztip/</a><o:p></o:p></span></p><p><span= lang=3DEN-US>At a high level:<o:p></o:p></span></p><ul type=3Ddisc><li = class=3DMsoNormal = style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 = level1 lfo1'><strong><span lang=3DEN-US = style=3D'font-family:=E5=AE=8B=E4=BD=93'>ZTNP</span></strong><span = lang=3DEN-US> looks at how to bind attestation (or posture) to = authorization at session establishment, including channel binding and = local policy evaluation by the relying party. <o:p></o:p></span></li><li = class=3DMsoNormal = style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 = level1 lfo1'><strong><span lang=3DEN-US = style=3D'font-family:=E5=AE=8B=E4=BD=93'>ZTIP</span></strong><span = lang=3DEN-US> explores how to bind authorization to structured user = intent across delegation chains, with explicit scope monotonicity and = end-to-end verifiability. <o:p></o:p></span></li></ul><p><span = lang=3DEN-US>The drafts explore a potential gap = between:<o:p></o:p></span></p><ul type=3Ddisc><li class=3DMsoNormal = style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l2 = level1 lfo2'><span lang=3DEN-US>attestation (e.g., RATS-style = evidence/results), and <o:p></o:p></span></li><li class=3DMsoNormal = style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l2 = level1 lfo2'><span lang=3DEN-US>authorization mechanisms (OAuth / = GNAP)<o:p></o:p></span></li></ul><p><span lang=3DEN-US>This is = particularly true in scenarios where actions are delegated across = multiple agents and are susceptible to prompt injection or confused = deputy patterns.<o:p></o:p></span></p><p><span lang=3DEN-US>These drafts = are intended as early contributions. I=E2=80=99m interested in critical = feedback, especially on:<o:p></o:p></span></p><ul type=3Ddisc><li = class=3DMsoNormal = style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 = level1 lfo3'><span lang=3DEN-US>whether the problem framing resonates = <o:p></o:p></span></li><li class=3DMsoNormal = style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 = level1 lfo3'><span lang=3DEN-US>how this relates to existing work in = OAuth, GNAP, and RATS <o:p></o:p></span></li><li class=3DMsoNormal = style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 = level1 lfo3'><span lang=3DEN-US>and whether there is an appropriate = venue (existing WG or otherwise) for further discussion = <o:p></o:p></span></li></ul><p><span lang=3DEN-US>Thank you for any = feedback or direction.<o:p></o:p></span></p><p><span lang=3DEN-US>Best = regards,<br>Jake Miller<br><a = href=3D"mailto:[email protected]">[email protected]</a><o:p></o:p></span></p></di= v></div></div></body></html> ------=_NextPart_000_0016_01DCD6F6.75F32480-- --===============7159247397078518894== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18Kc2FhZyBtYWls aW5nIGxpc3QgLS0gc2FhZ0BpZXRmLm9yZwpUbyB1bnN1YnNjcmliZSBzZW5kIGFuIGVtYWlsIHRv IHNhYWctbGVhdmVAaWV0Zi5vcmcK --===============7159247397078518894==--