I-D Action: draft-ietf-sidr-ltamgmt-05.txt

internet-drafts@ietf.org Mon, 04 June 2012 22:55 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-ietf-sidr-ltamgmt-05.txt
Message-ID: <20120604225509.20036.28277.idtracker@ietfa.amsl.com>
Date: Mon, 04 Jun 2012 15:55:09 -0700
Cc: sidr@ietf.org
Precedence: list
Reply-To: internet-drafts@ietf.org

A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF.

	Title           : Local Trust Anchor Management for the Resource Public Key Infrastructure
	Author(s)       : Mark Reynolds
                          Stephen Kent
                          Matthew Lepinski
	Filename        : draft-ietf-sidr-ltamgmt-05.txt
	Pages           : 28
	Date            : 2012-06-04

   This document describes a facility to enable a relying party (RP) to
   manage trust anchors (TAs) in the context of the Resource Public Key
   Infrastructure (RPKI). It is common to allow an RP to import TA
   material in the form of self-signed certificates. The facility
   described in this document allows an RP to impose constraints on such
   TAs. Because this mechanism is designed to operate in the RPKI
   context, the relevant constraints are the RFC 3779 extensions that
   bind address spaces and/or autonomous system (AS) numbers to
   entities. The primary motivation for this facility is to enable an RP
   to ensure that resource allocation information that it has acquired
   via some trusted channel is not overridden by the information
   acquired from the RPKI repository system or by the putative TAs that
   the RP imports. Specifically, the mechanism allows an RP to specify a
   set of bindings between public key identifiers and RFC 3779 extension
   data and will override any conflicting bindings expressed via the
   putative TAs and the certificates downloaded from the RPKI repository
   system. Although this mechanism is designed for local use by an RP,
   an entity that is accorded administrative control over a set of RPs
   may use this mechanism to convey its view of the RPKI to a set of RPs
   within its jurisdiction. The means by which this latter use case is
   effected is outside the scope of this document.


A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-sidr-ltamgmt-05.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

This Internet-Draft can be retrieved at:
ftp://ftp.ietf.org/internet-drafts/draft-ietf-sidr-ltamgmt-05.txt

The IETF datatracker page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-sidr-ltamgmt/

I-D Action: draft-ietf-sidr-ltamgmt-05.txt internet-drafts