[TLS] Re: BRAID IETF 126 Hackathon

George Davey <braid@CPU.io> Sat, 18 July 2026 17:17 UTC

Return-Path: <braid@CPU.io>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 524B1118F95E4 for <tls@mail2.ietf.org>; Sat, 18 Jul 2026 10:17:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784395058; bh=K+9djdHwIWOemPqKTDRcW7fX0WnLpF3tWUQS2j890i8=; h=From:To:CC:Subject:Date:References:In-Reply-To; b=AJOoSyfpDyYjXTdZXUBOxLtlG6AgPbKEJ0ZRPQqm3J24AkiVcNO1S6SDbEyZJIxXM h4IT0jBK4q6RCSeQXRlWCWz5UD65I8kfmaQ29A3B2d4oiR/xt/q0XTMUpUjxcYKuPP jDNCAZX63uYgZAMkrSzovq/kPKi/rcSbveDqsWnU=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cpu.io
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DDCOa5Vx1jFq for <tls@mail2.ietf.org>; Sat, 18 Jul 2026 10:17:34 -0700 (PDT)
Received: from PH7PR06CU001.outbound.protection.outlook.com (mail-westus3azon11020077.outbound.protection.outlook.com [52.101.201.77]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 60E8B118F95D8 for <tls@ietf.org>; Sat, 18 Jul 2026 10:17:34 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=B3EnZU/AlCJjt8m2FMNSfWUlVOJkUkdvjW7qoAM5woL05mpwC0p783D8Uv+tIKrQUmZ/rLYR1IfhR8dG1WJC/sY7B4PBte/XQ0RM3+virBrhsAsNOn8ua4zmDXwP1Qem0+qX/Y/kZh1POZG4Cg5VZUl2h/YGCCfwtpNOsJqc0cM7HdHoa3RPvvR7mNCww8dA5bBE04M8eliVedkXcZ6+kqppRtcILJOQ08Ykznybu/sluGk2tJV8mbZdRPyYKU9teH3AgOp5qzmLD5g1DhgP1KU1yphUXaW/lSIUdAd4q0c+8NBa5Glcwevspw6sPWOlfbUaeM3+IQC76crOoHrndA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Xpy9Qdz+IDCu47c6BQQ+CmtRirWE6QQmG5kzWPqepWU=; b=t8xWqkGLxT8xz2jgHTvUBGrELhR6nytIL6JlSU8MZdY72hK+Tg74/zW+k5j8xXWhlPzUaWulL96Dv1yaPuTnCfKNBtrQYKVy5i9xuMtQLgKuom1p7MmXuqtUtn3WbOiUJQ/KhqeBEAQG4EXs4C1aOlr/sAVaWZEQI9bQQ0tPVVizByA/igSz4T5VexVrOaNGSkw+9fkZe8ixK6qpHYhFR/FyUgpNpPX/G/3gGTW+ChyndsHi9UtXNCQf3oRn5XJsMk3IaNEDgmZ40nKKmkLOwPbg1QJ7kOsKC2wmwhfAIZp0oqg7AG/DCYsNiCsz9dgRVSB9j9qOf27nz5B+1OxYxw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cpu.io; dmarc=pass action=none header.from=cpu.io; dkim=pass header.d=cpu.io; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cpu.io; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Xpy9Qdz+IDCu47c6BQQ+CmtRirWE6QQmG5kzWPqepWU=; b=Jbgdk2Xkr1J10OQxKyrNiA54tELs9jLNEpicIJ/CF8SDazZTMCSZV8jZsKvOOk3rfEPclmjGHqIrtuZe+p6tAImazalAvB5FPnons1sWoO3QqkB2su0AAX0/TlW5vdn7OYZ1myVEqqDRSikntJSfRwyafwe5dFtvRosqoIVv3BkGPx/7+YgKlBLI5U1F3xcn8WJ+xTGCt2x1mjjXbmT3NbBcvuHokMYxaIZC/wixIinFbJwtveg7jdaSMex0XbnxkuOpKlRLfh96XY6ifCBlikSR4xiTFaDe2mwy0V/m+CpVArJNKTB1BJK3R34WLIebJWPWY8cSLjLaSb5PUfUb0g==
Received: from PH0PR18MB4409.namprd18.prod.outlook.com (2603:10b6:510:e3::13) by IA3PR18MB927651.namprd18.prod.outlook.com (2603:10b6:208:542::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.11; Sat, 18 Jul 2026 17:17:25 +0000
Received: from PH0PR18MB4409.namprd18.prod.outlook.com ([fe80::51d8:5f35:8ea9:dd55]) by PH0PR18MB4409.namprd18.prod.outlook.com ([fe80::51d8:5f35:8ea9:dd55%3]) with mapi id 15.21.0223.008; Sat, 18 Jul 2026 17:17:25 +0000
From: George Davey <braid@CPU.io>
To: Nico Frati <jnfrati@pm.me>
Thread-Topic: BRAID IETF 126 Hackathon
Thread-Index: AQHdFphC28VlFJiqUkSsQomXx4BvPrZzg2cQ
Date: Sat, 18 Jul 2026 17:17:24 +0000
Message-ID: <PH0PR18MB440932CDFEDBA24BF734980AB4C52@PH0PR18MB4409.namprd18.prod.outlook.com>
References: <0aBgk62MqxNq9zi7m8NiEwvjinLbPHxk3vKia7K3SVBAXBJ6uehLYPh9SEKB1PlzKJhfvgO60h3Urbs_0_aKrIe_etHT8DG41RqBFXHL4-Q=@pm.me>
In-Reply-To: <0aBgk62MqxNq9zi7m8NiEwvjinLbPHxk3vKia7K3SVBAXBJ6uehLYPh9SEKB1PlzKJhfvgO60h3Urbs_0_aKrIe_etHT8DG41RqBFXHL4-Q=@pm.me>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=CPU.io;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH0PR18MB4409:EE_|IA3PR18MB927651:EE_
x-ms-office365-filtering-correlation-id: a5adc289-147a-4a5a-2a85-08dee4f06fad
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|6049299003|1800799024|23010399003|376014|19092799006|10070799003|18002099003|22082099003|5023799004|8096899003|4053099003|38070700021|56012099006|10067099003;
x-microsoft-antispam-message-info: anlq9U5FtNnHFaNDi43Scr/TbNAz55lYvL+fTnTVsTc5ell7Gl9omy984ozooKY0j9PcKQR6+6cE4iuyNQ3a3zeB3PLogrHwwsS/iSaPBpsjLzOb6X213/oCzJG/c4SV8A+9o3Hz3D99IpP7YBfWcRyD3sLBm4ADAjpgfF8xL33UkjzTbSp5HuBvJyF9/IjZ9Nid5rvS2oEzYJafjJ4BA4LDimCBhE7ITEtpykW77JwSD2G5Fur01eyDFE4ZGKQyaclUFGusfvZ8bpdYlCkONlppTgOzmOeouEPpwB7ra65z3fqoM2WwN0nGSsqqqG8jgOP/hXBJYH+jDEMcWFBKxJbSnuMr1mGtkasCps6tbO7deoYNJ/ZaL2YC89Qn95bbUmGX7JVVZQVQ8HmPcJXwi4kL2C6NCK3p+ldE2VdhXj125fEWqaEpHU2ll9CVpb2AqAKXXiHZL23zBluvxT7Cmjka8KkKfLa3q/f7lhvMu463Ec0BLeDDgrJHq5YtQ9z5N002HC9bRr3RBvGNM0mR3Bq8R1uC/z41mEM60qf3e2gO9u/LZZaH36o1pF5xS9wdowCvOV4YJ0xCn6RJlRtCjq/jCqrHRameN0kvEslEyJ7ajfF8VZjvNcS62nyCXrBZYVAjTfJmeTWWSOqRWlE/PgwPlcBpbNF9DIgBRa5zH1g=
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH0PR18MB4409.namprd18.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(6049299003)(1800799024)(23010399003)(376014)(19092799006)(10070799003)(18002099003)(22082099003)(5023799004)(8096899003)(4053099003)(38070700021)(56012099006)(10067099003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/mixed; boundary="_004_PH0PR18MB440932CDFEDBA24BF734980AB4C52PH0PR18MB4409namp_"
MIME-Version: 1.0
X-OriginatorOrg: cpu.io
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH0PR18MB4409.namprd18.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: a5adc289-147a-4a5a-2a85-08dee4f06fad
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2026 17:17:25.0019 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 1bfe95ba-db0b-4eeb-86c5-c4b4ef25d00e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ygxzeXnYNR809M1lZ8AYoZy+kdR06D0SZbThLaY/4eFu1GZGp5CWT8E4TKhpwHwYCoM9uKCadK2MRSgJypYQeQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA3PR18MB927651
Message-ID-Hash: XJGTID6HCHWCEWYLBJLEZTYQEHGSEJBU
X-Message-ID-Hash: XJGTID6HCHWCEWYLBJLEZTYQEHGSEJBU
X-MailFrom: braid@CPU.io
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "<tls@ietf.org>" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: BRAID IETF 126 Hackathon
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/qoUH6jdkEysEWEp_4gpbOWQL8cA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hi, Thanks for the interest — glad to have you. Quick status: -01 goes up as soon as the pre-meeting submission window reopens. It's a substantial restructure, not a tidy-up, so it's worth waiting for rather than reading -00. Draft: https://datatracker.ietf.org/doc/draft-davey-tls-braid/ Code: https://github.com/braid2026/BRAID The idea in one line: build independent circuit breakers into ordinary web certificates, so that any authorization the owner appoints can be withdrawn to invalidate the certificate — and because invalidation is reliable and doesn't involve the CA, the certificate no longer has to be short-lived. What changed in -01, and why it matters if you're thinking about contributing: Eric Rescorla reviewed -00 and pointed out that its mandatory 7-day credential refresh just relocated the renewal treadmill rather than removing it — which was the opposite of my intent. -01 separates authorization (published once, persists until withdrawn) from revocation latency (how fast a withdrawal propagates). In the base profile you publish one DNSSEC-signed record and then do nothing; short-interval refresh is now an optional enhancement. -01 also concedes openly what it costs: you run conventional certs alongside during any transition, and the DNSSEC dependency is real and unsolved. So the design is genuinely live right now, which I think makes this a good moment to jump in rather than a bad one. The open questions I'd most value help on for -02: - Wire formats — the braid_chain extension, the BRAIDBinding extension, and the Anchor record are deliberately unspecified in -01. That's the biggest concrete gap. - Revocation latency: what bound is defensible, and how should relying party caching be constrained? - The DNSSEC validation modes in §14 — whether the "validated material" mode is actually workable for general clients. - Whether owner-appointed third-party invalidation (the Witness strand) is a feature or a liability. If any of that is your area, say so and I'll loop you in directly. Happy to talk through any of it before -01 even lands. Thanks, George

From: Nico Frati <jnfrati@pm.me>
Sent: Saturday, July 18, 2026 4:32 AM
To: George Davey <fast@cpu.io>
Subject: BRAID IETF 126 Hackathon

 EXTERNAL
________________________________
Hello George, nice to meet you!

I'm Nico Frati, I was interested to help getting BRAID phase 0 done, but I couldn't seem to find the project on the hackathon room, is there another place where the team is at?

Thanks,
Nico