[Anima] I-D Action: draft-ietf-anima-brski-prm-12.txt
internet-drafts@ietf.org Mon, 04 March 2024 20:48 UTC
Return-Path: <internet-drafts@ietf.org>
X-Original-To: anima@ietf.org
Delivered-To: anima@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 06B62C180B5F; Mon, 4 Mar 2024 12:48:52 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Cc: anima@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 12.6.1
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: anima@ietf.org
Message-ID: <170958533200.34141.2589622696146671345@ietfa.amsl.com>
Date: Mon, 04 Mar 2024 12:48:52 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima/yE8m9VLNKVBI0Gc6aW7mvBfPSrU>
Subject: [Anima] I-D Action: draft-ietf-anima-brski-prm-12.txt
X-BeenThere: anima@ietf.org
X-Mailman-Version: 2.1.39
List-Id: Autonomic Networking Integrated Model and Approach <anima.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima>, <mailto:anima-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima/>
List-Post: <mailto:anima@ietf.org>
List-Help: <mailto:anima-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima>, <mailto:anima-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Mar 2024 20:48:52 -0000
Internet-Draft draft-ietf-anima-brski-prm-12.txt is now available. It is a
work item of the Autonomic Networking Integrated Model and Approach (ANIMA) WG
of the IETF.
Title: BRSKI with Pledge in Responder Mode (BRSKI-PRM)
Authors: Steffen Fries
Thomas Werner
Eliot Lear
Michael C. Richardson
Name: draft-ietf-anima-brski-prm-12.txt
Pages: 105
Dates: 2024-03-04
Abstract:
This document defines enhancements to Bootstrapping a Remote Secure
Key Infrastructure (BRSKI, RFC8995) to enable bootstrapping in
domains featuring no or only limited connectivity between a pledge
and the domain registrar. It specifically changes the interaction
model from a pledge-initiated mode, as used in BRSKI, to a pledge-
responding mode, where the pledge is in server role. For this, BRSKI
with Pledge in Responder Mode (BRSKI-PRM) introduces a new component,
the Registrar-Agent, which facilitates the communication between
pledge and registrar during the bootstrapping phase. To establish
the trust relation between pledge and registrar, BRSKI-PRM relies on
object security rather than transport security. The approach defined
here is agnostic to the enrollment protocol that connects the domain
registrar to the domain CA.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-anima-brski-prm/
There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-anima-brski-prm-12
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-anima-brski-prm-12
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
- [Anima] I-D Action: draft-ietf-anima-brski-prm-12… internet-drafts