[Secdispatch] Request for Review and Dispatch Guidance: Zero Trust Transfer Orchestration Protocol (ZTOP)

sripad karthik <sripadkarthik@gmail.com> Tue, 18 August 2026 02:12 UTC

Return-Path: <sripadkarthik@gmail.com>
X-Original-To: secdispatch@mail2.ietf.org
Delivered-To: secdispatch@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 8218912B59A7E for <secdispatch@mail2.ietf.org>; Mon, 17 Aug 2026 19:12:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787019164; bh=0ugh1y3npekjaWNcCnV8LOiclJq5oUAspH1L1TmVlIU=; h=From:Date:Subject:To; b=p7iHrn/WEgf3kPjJVPDMq7Yrck+LBFREfdQeIq88wK0Bdw7adkM7vNyaO5PnHinUY /Cu/ZyPd42oTEQaqdgs5AVGkxCH11M/whOshNY2mpI1xvKtPRbcHCWQouVGlsitmAA 8wiM/AO18vGKBEFfcEnP75Y6p62y0Av5iwdE6H5M=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3VXegRmb-LBn for <secdispatch@mail2.ietf.org>; Mon, 17 Aug 2026 19:12:42 -0700 (PDT)
Received: from mail-lf1-x12a.google.com (mail-lf1-x12a.google.com [IPv6:2a00:1450:4864:20::12a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id DEB3C12B59A77 for <secdispatch@ietf.org>; Mon, 17 Aug 2026 19:12:42 -0700 (PDT)
Received: by mail-lf1-x12a.google.com with SMTP id 2adb3069b0e04-5b0148201fbso3953549e87.3 for <secdispatch@ietf.org>; Mon, 17 Aug 2026 19:12:42 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1787019162; cv=none; d=google.com; s=arc-20260327; b=EqI6CtOb//Cwon45nVQI/JTEEKo/BBgGvi5/AzHfZnujaBJPBd38j+d2mIIVUriYke 0cJMDNwkvu9Kax80BoQSCQCDcgIYcYlODbbWHK7NcfSLcrZ4Tv7MWSYha7EnpfgSePub sMqiKpq7MTfCUAPrgDrsw92v8vRq0T3kSs6CyqzqRWRu/abFTaMmX2f+wy8lTR/DFImF ULPrEzDnuAu8FlfsIxlRsH1eK9QLhZ7DFCA508pRNGKmKUdRFChBINE8ObpJhI84Kz3y Cc1ch+e9xkOcWwusZl8h/XCzKZIS5aczUA3ZucVIRxCViAlwei7dI9cQpugJsaWG1sjZ K15g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=jHu0kNcSvkOPrYLdi85rwAcBYrQ624ti6UczwlbyWyM=; fh=vFYwBBkMLo8rHneSWjgueiCasiyA19GnuajJJpgpRe8=; b=WJH/h0qSsauq7ewJIGt9Xtf0aH6f345GNEwfzWEWvMT6Q5rK2mMvTPXDX45YWejjeZ 0wGRyde7Is41S9BIP5s3PsSufe2TKTOlUfD6RaeYSvl3F9TLvqJ58LF3zXhnlkowygSP 7Spz86vJIn6mI1VP5irysD38Z36ulENMRvfCommxEgrFyRY8KDOjdOKyOVA2QqMUYDJr CMVJv/AB8bLIxT9kfatMR432Ri2fUjLvJEuVeQd6xGONEMoulFpcRBVGiCcVYvP0lBSu TS29xubgnboLnLFjUnisrWZqixHVUne+nl6Yc00GYegM+YnAUvFvdk4pEssKtBJdEzce Oomw==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1787019162; x=1787623962; darn=ietf.org; h=content-type:to:subject:message-id:date:from:mime-version:from:to :cc:subject:date:message-id:reply-to:content-type; bh=jHu0kNcSvkOPrYLdi85rwAcBYrQ624ti6UczwlbyWyM=; b=Rlg5qRGJ1FaU64fBTmzu0nyHmzSpB/u/+bB5yrZ4MkHt0qBXngBIQLo9Yqx5rG4SqB J5O5190JnOclRFQRHCCM3ZVRB5wZ05aS70acwTFKkwS9ZgX7Lt4/RYpaSYIUIbc23WT/ yWiXfYwfr2inHo9eUHn9FOAsWeP7ULUN7eURmzuRmxzS2NCCj1gr8MFHR9eo0tD7glqE cAEwnwfxzQwHoNH03I5sK7ydHar7rZ0ui1lT9eXXSxnDpHsdOeXzNZ4vl2AN+WngYI3z 7DXzJQhpaYSO3kNdfA3o08Eo5BShN4d4x/b1P4oEc4z9ymNXatamvBd3dGr+5F8t0AH3 9y1A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787019162; x=1787623962; h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=jHu0kNcSvkOPrYLdi85rwAcBYrQ624ti6UczwlbyWyM=; b=pRBcQU0ij4oCxPxyb+SEtsiTAmWuokbTKatbO7BOtJromm+pF2A2NBtArA1ZiA7onG 9BLgZGGftPji71lIMJStuumG7mxiqPUIhomA27fxt6tjfe+E2Y8dvXPoL5TIv6GPhOnr Q0Nzd/ufVtBt11t2uQnMnik0vN//QIu9t3bVy5sxqfR3++gypbaZPpmBA0n4e44wYnch zM9ymgh5ZXTFXSc7lbamx6iGuRRO9R9GuXZQElAhn7mkk5SJ6/+E49A16LjFJLroy2GF to4zSGDD8SLLBFCDEMdzXg+DE+P0lLWfrIu1VT6ICJ5q95RXqETyMwVg2Sgbd2cxJEMY XoMg==
X-Gm-Message-State: AOJu0YxLs/WV5Qg2ElODLfDeMbZVmkLQOrYSbiweTMEnvmb1RA9gg7zL fGCbMLqfUohSEcRH7RCSHJXjoV+App8Ci5KIahEJGHSFRLS/63Znw7X0/3L/avKoYLZeOxn3W5N f+kUWAXF9NN7lp59Fxh4ZjA0GAM7v1hDZV7zq
X-Gm-Gg: AR+sD137D9wYEGsAwxOAWCfvzNsHpeHc+EGj6QfIbKGD1suPnLN+Q0jIqB3SOSrqbK1 oE3Wk9UUaEtxklmHepuIa+HRUhMZ/jkdRpdJgqAfnEwgjZoRJT8p1qAqU0U0rV7XwhBNSCGTiYD ZxvNSW0HqIoYOoOwanTvXvfYLHQ5JCbHlbIeIjg+DlaVXNBrZFrsyJNFcRAj8rs9K6XRH+jiJ21 F6Zjrua4vE/sT3Dt5OHLT1LVN/qUS5BSzJJVWemC+YU+HGYKEgrB8f5drH3crq3fodnOjq6CUyO HonrWfO0ASHTeMnQFbn1DYYTQK8UFvEnQ2gw7n5HqmWh6fsp88l5xv9J7eYSaYVaCvda8VICwfa s3x+IGyo1Su14aUY6YP9LE5h56neGbFOmSco=
X-Received: by 2002:a05:6512:6892:b0:5b0:190a:5b63 with SMTP id 2adb3069b0e04-5b4591176c4mr2869644e87.15.1787019161587; Mon, 17 Aug 2026 19:12:41 -0700 (PDT)
MIME-Version: 1.0
From: sripad karthik <sripadkarthik@gmail.com>
Date: Tue, 18 Aug 2026 07:42:24 +0530
X-Gm-Features: AcwNN1VDpflS4lzRb6VBdQVN8tXfIjhUpd83UERY7HsBJq3rZv0LRu5qR53eMVU
Message-ID: <CAC4a+jBeb_Od9rLOzPMunEQEMNLe2=dY1dPbov86Jf1kUcKg=g@mail.gmail.com>
To: secdispatch@ietf.org
Content-Type: multipart/alternative; boundary="0000000000005555a1065948d2af"
Message-ID-Hash: 4HJ6XMFORQR4NT3BRE32EI5RCBATZMP2
X-Message-ID-Hash: 4HJ6XMFORQR4NT3BRE32EI5RCBATZMP2
X-MailFrom: sripadkarthik@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-secdispatch.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Secdispatch] Request for Review and Dispatch Guidance: Zero Trust Transfer Orchestration Protocol (ZTOP)
List-Id: Security Dispatch <secdispatch.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdispatch/KBqIfWAk7VG3FupfNoqLHGD8b5U>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdispatch>
List-Help: <mailto:secdispatch-request@ietf.org?subject=help>
List-Owner: <mailto:secdispatch-owner@ietf.org>
List-Post: <mailto:secdispatch@ietf.org>
List-Subscribe: <mailto:secdispatch-join@ietf.org>
List-Unsubscribe: <mailto:secdispatch-leave@ietf.org>

Dear SECDISPATCH Chairs and Participants,

I am writing to introduce my Internet Draft, *“Zero Trust Transfer
Orchestration Protocol (ZTOP),"* and to seek technical feedback and
guidance regarding its suitability for further discussion within the IETF
security area.

ZTOP proposes an application-layer protocol for secure file transfer in
Zero Trust environments. It integrates cryptographic peer identity,
continuous device attestation, dynamic trust evaluation, policy
enforcement, file-level cryptographic integrity, transfer metadata
validation, behavioral analysis, non-repudiation, and trust-preserving
session recovery.

The current Internet Draft is:

https://datatracker.ietf.org/doc/draft-ztop-secdispatch-protocol/

A reference implementation is also available as part of the draft.

I am the sole author and contributor of this work.

I would particularly appreciate feedback regarding:

   1. Whether the problem addressed by ZTOP is relevant to the IETF
   security community.
   2. Whether the proposed protocol architecture provides sufficient
   distinction from existing secure file transfer and Zero Trust mechanisms.
   3. Whether there are existing IETF protocols or working groups that
   substantially overlap with the proposed functionality.
   4. Whether ZTOP is appropriate for further discussion through the
   security dispatch process.
   5. What additional security analysis, implementation experience,
   interoperability testing, or architectural clarification would be required
   for further consideration.

I would be grateful for the community's technical feedback and guidance
regarding the appropriate next steps for ZTOP within the IETF.

Thank you for your time and consideration.

-- 
Thanks and Regards
Sripad Rama Hebbar
https://www.linkedin.com/in/sripadrh/