Protocol Action: 'Supply Chain Integrity, Transparency, and Trust (SCITT) Reference APIs' to Proposed Standard (draft-ietf-scitt-scrapi-11.txt)

The IESG <iesg-secretary@ietf.org> Mon, 29 June 2026 20:29 UTC

Return-Path: <iesg-secretary@ietf.org>
X-Original-To: ietf-announce@ietf.org
Delivered-To: ietf-announce@mail2.ietf.org
Received: from [10.244.22.182] (unknown [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id 8F56810A250F8; Mon, 29 Jun 2026 13:29:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782764979; bh=Cb6milWmSy/M5O8ymilb+JQrzxwI3T+SRgoNJBiyaPg=; h=From:To:Subject:Cc:Date; b=ZYLjZMQ67Zhp3lVp5NZWk2ig6wpBIb+JeKPuHS8EzSIcsmGpRgdz1nutd/Sa8lX5q 7dz5V64WX2z3jRLqOddDcCF4yLqRF0DjB9F9JNNmLZEPYTCZ4MWKFxmGnq8soOsPkf iAoNjDy0b0LvQyjCzZwbaNIT21zrluVnF27ldqWc=
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Protocol Action: 'Supply Chain Integrity, Transparency, and Trust (SCITT) Reference APIs' to Proposed Standard (draft-ietf-scitt-scrapi-11.txt)
X-Test-IDTracker: no
X-IETF-IDTracker: 12.67.1
Auto-Submitted: auto-generated
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <178276497951.2097844.6604434971173788220@dt-datatracker-f9b87776f-xzl65>
Date: Mon, 29 Jun 2026 13:29:39 -0700
Message-ID-Hash: WIYJ6SZT6Z4GN2PQBKSFKVXUASF3UQUL
X-Message-ID-Hash: WIYJ6SZT6Z4GN2PQBKSFKVXUASF3UQUL
X-MailFrom: iesg-secretary@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ietf-announce.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: The IESG <iesg@ietf.org>, amchamay@microsoft.com, draft-ietf-scitt-scrapi@ietf.org, rfc-editor@rfc-editor.org, scitt-chairs@ietf.org, scitt@ietf.org
X-Mailman-Version: 3.3.9rc6
List-Id: "IETF announcement list. No discussions." <ietf-announce.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/aXWmxCAH7ONV3TECIRMt5N26qzQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf-announce>
List-Help: <mailto:ietf-announce-request@ietf.org?subject=help>
List-Owner: <mailto:ietf-announce-owner@ietf.org>
List-Post: <mailto:ietf-announce@ietf.org>
List-Subscribe: <mailto:ietf-announce-join@ietf.org>
List-Unsubscribe: <mailto:ietf-announce-leave@ietf.org>

The IESG has approved the following document:
- 'Supply Chain Integrity, Transparency, and Trust (SCITT) Reference APIs'
  (draft-ietf-scitt-scrapi-11.txt) as Proposed Standard

This document is the product of the Supply Chain Integrity, Transparency, and
Trust Working Group.

The IESG contact persons are Christopher Inacio and Deb Cooley.

A URL of this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-scitt-scrapi/




Technical Summary

   This document describes a REST API that supports the normative
   requirements of the SCITT Architecture.  Optional key discovery and
   query interfaces are provided to support interoperability with X.509
   Certificates, alternative methods commonly used to support public key
   discovery and Artifact Repositories.

Working Group Summary

  There was broad consensus within the working group, no controversy.  

Document Quality

The document contains HTTP requests, some of which include a CBOR EDN body.
They have been reviewed manually.  In addition there has been an early httpdir
review that has been very helpful.

There are no MIBs, MediaTypes, or Yang. 

Existing implementations of this specifications are:
Datatrails [0], Tradeverifyed [1], and Microsoft [2], all are Open Source.

[0] https://www.datatrails.ai
[1] https://tradeverifyd.com
[2] https://www.microsoft.com

Personnel

   The Document Shepherd for this document is Amaury Chamayou. The
   Responsible Area Director is Deb Cooley.