Last Call: <draft-ietf-lamps-csr-attestation-29.txt> (Use of Remote Attestation with Certification Signing Requests) to Proposed Standard

The IESG <iesg-secretary@ietf.org> Wed, 02 September 2026 19:56 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Last Call: <draft-ietf-lamps-csr-attestation-29.txt> (Use of Remote Attestation with Certification Signing Requests) to Proposed Standard
Auto-Submitted: auto-generated
Precedence: bulk
Sender: iesg-secretary@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <178837897969.594612.1581282995795524774@dt-datatracker-6669c7b496-4m6kd>
Date: Wed, 02 Sep 2026 12:56:19 -0700
Message-ID-Hash: W7NIQ7PS2RTNRB5JBTLFWBWC7PK5PVQL
CC: draft-ietf-lamps-csr-attestation@ietf.org, lamps-chairs@ietf.org, spasm@ietf.org
Reply-To: last-call@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/Enn_KGC5oalSdSRAqpqMGE-GFfQ>

The IESG has received a request from the Limited Additional Mechanisms for
PKIX and SMIME WG (lamps) to consider the following document: - 'Use of
Remote Attestation with Certification Signing Requests'
  <draft-ietf-lamps-csr-attestation-29.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
last-call@ietf.org mailing lists by 2026-09-16. Exceptionally, comments may
be sent to iesg@ietf.org instead. In either case, please retain the beginning
of the Subject line to allow automated sorting.

Abstract


   Certification Authorities (CAs) issuing certificates to Public Key
   Infrastructure (PKI) end entities may require a certificate signing
   request (CSR) to include additional verifiable information to confirm
   policy compliance.  For example, a CA may require an end entity to
   demonstrate that the private key corresponding to a CSR's public key
   is secured by a hardware security module (HSM), is not exportable,
   etc.  The process of generating, transmitting, and verifying
   additional information required by the CA is called remote
   attestation.  While work is currently underway to standardize various
   aspects of remote attestation, a variety of proprietary mechanisms
   have been in use for years, particularly regarding protection of
   private keys.

   This specification defines ASN.1 structures which may carry
   attestation data for PKCS#10 and Certificate Request Message Format
   (CRMF) messages.  Both standardized and proprietary attestation
   formats are supported by this specification.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-lamps-csr-attestation/



No IPR declarations have been submitted directly on this I-D.

Last Call: <draft-ietf-lamps-csr-attestation-29.t… The IESG