[stir] I-D Action: draft-ietf-stir-certificate-transparency-00.txt

internet-drafts@ietf.org Thu, 25 September 2025 13:05 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <175880552216.1510338.17052750198960710074@dt-datatracker-6c6cdf7f94-h6rnn>
Date: Thu, 25 Sep 2025 06:05:22 -0700
Message-ID-Hash: WSTV3FSTH32BEKTURIDSHA3MJQKKMCR5
CC: stir@ietf.org
Reply-To: stir@ietf.org
Subject: [stir] I-D Action: draft-ietf-stir-certificate-transparency-00.txt
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/WUrgoH_y0OZCbRN3v7eL3ta-_7M>

Internet-Draft draft-ietf-stir-certificate-transparency-00.txt is now
available. It is a work item of the Secure Telephone Identity Revisited (STIR)
WG of the IETF.

   Title:   STI Certificate Transparency
   Authors: Chris Wendt
            Rob Sliwa
            Alec Fenichel
            Vinit Anil Gaikwad
   Name:    draft-ietf-stir-certificate-transparency-00.txt
   Pages:   15
   Dates:   2025-09-25

Abstract:

   This document describes a framework for the use of the Certificate
   Transparency (CT) protocol for publicly logging the existence of
   Secure Telephone Identity (STI) certificates as they are issued or
   observed.  This allows any interested party that is part of the STI
   eco-system to audit STI certification authority (CA) activity and
   audit both the issuance of suspect certificates and the certificate
   logs themselves.  The intent is for the establishment of a level of
   trust in the STI eco-system that depends on the verification of
   telephone numbers requiring and refusing to honor STI certificates
   that do not appear in a established log.  This effectively
   establishes the precedent that STI CAs must add all issued
   certificates to the logs and thus establishes unique association of
   STI certificates to an authorized provider or assignee of a telephone
   number resource.  The primary role of CT in the STI ecosystem is for
   verifiable trust in the avoidance of issuance of unauthorized
   duplicate telephone number level delegate certificates or provider
   level certificates.  This provides a robust auditable mechanism for
   the detection of unauthorized creation of certificate credentials for
   illegitimate spoofing of telephone numbers or service provider codes
   (SPC).

   The framework borrows the log structure and API model from RFC6962 to
   enable public auditing and verifiability of certificate issuance.
   While the foundational mechanisms for log operation, Merkle Tree
   construction, and Signed Certificate Timestamps (SCTs) are aligned
   with RFC6962, this document contextualizes their application in the
   STIR eco-system, focusing on verifiable control over telephone number
   or service provider code resources.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-stir-certificate-transparency/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-stir-certificate-transparency-00

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts

[stir] I-D Action: draft-ietf-stir-certificate-tr… internet-drafts