[Drip] Claims, Attestations, and Certificates

[Robert Moskowitz <[e-mail]>]

This is more on the CAC subject after lots of thoughts about who is on 1st.

A HHIT is a Claim.

The entity putting forward the HHIT is making a statement, without proof 
that there is a HI registered to the RAA|HDA and the hash component of 
the HHIT is derived from all the appropriate information following the 
ORCHID function.

The Self-Attestation is an Attestation/Claim of HI ownership.

Through the signature process, the entity putting forward the 
Self-Attestation is proving ownership of a keypair.  Validation of this 
proof does require obtaining the HI; it is CLAIMED that the RAA|HDA in 
the HHIT can provide the HI needed for the proof.

The Offline-Attestation is a full Attestation of all facts.

The 'internal' HDA Attestation of HI registration with the HDA is just 
an Attestation, not a Certificate (see below).  The 'outer' envelope is 
an Attestation of owning the HI registered and signing.

Finally, why an Attestation and not a Certificate?

In my view, a Certification of Registration would contain more 
information than currently in the HDA HI registration Attestation. 
Minimally it should have a registration date and end of registration 
period date.  Probably more, but this is sufficient to place it as an 
Attestation, not a Certificate.

Thus the terminology I have used in draft-ietf-drip-rid.

Next we can talk about all the objects in the claims draft....

Fun stuff!

Bob