[tsvwg] Introduction and new Internet draft URI scheme for Zero Trust Identity assertion, ztdnaid
Dick Brooks <dick@businesscyberguardian.com> Wed, 06 May 2026 22:03 UTC
Return-Path: <dick@businesscyberguardian.com>
X-Original-To: tsvwg@mail2.ietf.org
Delivered-To: tsvwg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 213B7EA2E80D for <tsvwg@mail2.ietf.org>; Wed, 6 May 2026 15:03:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1778104981; bh=6uKl3/B0jqsA9/mLLgs0rUi3pRB2sISapdrPWBBdABw=; h=Reply-To:From:To:Subject:Date; b=NlQ+gSdmf26W1XbByqrth5MV3k/UO/aNmwozf98nERPG2swcn9BjNBBzttJ/DL5+W BTqZO6bqnUI5aFx29mfIvRs2FGxABFa+4MAe0xZfgRMctrE7u9jgYIhh6upZuSbi7y eJSOnLgVOpAubeA0W79d7ep22eKN46OeQVP0+VHY=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.798
X-Spam-Level:
X-Spam-Status: No, score=-2.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=businesscyberguardian.com header.b="VrPTWNOn"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="v7aDALFA"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lPk5tQxO1PC8 for <tsvwg@mail2.ietf.org>; Wed, 6 May 2026 15:02:56 -0700 (PDT)
Received: from fhigh-b1-smtp.messagingengine.com (fhigh-b1-smtp.messagingengine.com [202.12.124.152]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 79B94EA2E7F9 for <tsvwg@ietf.org>; Wed, 6 May 2026 15:02:56 -0700 (PDT)
Received: from phl-compute-04.internal (phl-compute-04.internal [10.202.2.44]) by mailfhigh.stl.internal (Postfix) with ESMTP id 260177A00BE for <tsvwg@ietf.org>; Wed, 6 May 2026 18:02:50 -0400 (EDT)
Received: from phl-frontend-04 ([10.202.2.163]) by phl-compute-04.internal (MEProxy); Wed, 06 May 2026 18:02:50 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= businesscyberguardian.com; h=cc:content-type:content-type:date :date:from:from:in-reply-to:message-id:mime-version:reply-to :reply-to:subject:subject:to:to; s=fm3; t=1778104969; x= 1778191369; bh=piceis5PQ9Ib7A3JSz7phDEmsOWnXPc5ZS91Xn+iVZk=; b=V rPTWNOnuF13I4WdfXwP7n0aaRAkNXgV+Pxd2SGzyng+6i7o66RBPPNY95jaXPL5X ikTMst30L6EplJX07Ru21g8EsgSo8fa/P7QSX1ziagduzJ2rtzwWAchVqPKnvJrT 6ur9NC8LTlwHCRnX0cyFoA6XcDdQ4I2ravIIVIf0AndRMHlFE6y7vFf3JxMPDORY KgWOuwsdCt2pUR+QqVA+8Umr9zR2lWNjd2l6aP2/Mvl/ovrmeK9rstrI0V6Oxg52 Vr38buK12CJrQ2ffJE1U2XzoS8OAfM/AU14fj9SzrZyerZY5N/BZp5BwCmaT7i6K GQ1RY6wc9M0zBBC1OGNrQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:message-id :mime-version:reply-to:reply-to:subject:subject:to:to:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1778104969; x= 1778191369; bh=piceis5PQ9Ib7A3JSz7phDEmsOWnXPc5ZS91Xn+iVZk=; b=v 7aDALFAaERGjbwZW8qN4v4hWQTQmlHJ7nZxViqjVdkX2ACrTzVh0k80IUeLzZgN7 f0SIQD1O3ZsqnWMA0iKBiY/k88S/g1K8oYdrOS3miCK424VgDeQhsBNCXfD/GW5R R1Efd2Z7ChJJlMTmzLTlW/czEbAgPdeknBwzyobvZ9ujG2FqPO9FZsSJ5Ibw3iUt MHF6qeawsO57D70Bj0qeQJu4RisGDrCUH50ij1YphnU4ikNeY+egC+Pw55Ae7pNw H2HZtUFEqC52KvHvBdXwtdICsn6ZG+hFnDvQnVfEsjVUbLsEo89BgFsjBwzTK8nz /f96dKYhk49xEF3kr7gTg==
X-ME-Sender: <xms:ibr7afRIO8XNJqrNN_620e7h5cA55qpF4Yk7MS2Q91E91NacQWWdLA> <xme:ibr7aWrZVon9way6M6TZqEySlzvK28-fv-f8I_K-989J67aV5pvX1RTKJF7fFLmKp f-F5O221eNAQypspV6y0uDlhopQGOxKDjPKIx5ycHnH7frrcYMoWg>
X-ME-Received: <xmr:ibr7af6auOMBIROW-AfzBxHgQQh0UXY1Sxqi4_ezeMYID-qB9VLdE5g>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefhedrtddtgddutdehjeegucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfurfetoffkrfgpnffqhgenuceu rghilhhouhhtmecufedttdenucgfrhhlucfvnfffucdlqdeimdenucfjughrpehrhffvuf ffohfkgggtofhtsehrtdhgpedvtddvnecuhfhrohhmpedfffhitghkuceurhhoohhkshdf uceoughitghksegsuhhsihhnvghsshgthigsvghrghhurghrughirghnrdgtohhmqeenuc ggtffrrghtthgvrhhnpefffefgheejteehhfejfeeitdeftefgtddvieeljedvgeeffffg ueefkefhffdtleenucffohhmrghinhepihgvthhfrdhorhhgpdhnihhsthdrghhovhdprh gvlhhirggslhgvvghnvghrghihrghnrghlhihtihgtshdrtghomhdpsghushhinhgvshhs tgihsggvrhhguhgrrhguihgrnhdrtghomhenucevlhhushhtvghrufhiiigvpedtnecurf grrhgrmhepmhgrihhlfhhrohhmpeguihgtkhessghushhinhgvshhstgihsggvrhhguhgr rhguihgrnhdrtghomhdpnhgspghrtghpthhtohepuddpmhhouggvpehsmhhtphhouhhtpd hrtghpthhtohepthhsvhifghesihgvthhfrdhorhhg
X-ME-Proxy: <xmx:ibr7ab1Gop3yP5Ot5a_bbukof9rC-Y2bNAwZFfq3Po28YQ_OXHDn4w> <xmx:ibr7acFXBIIXXUwlx5LF3Ip98KdrTYfR4Xsxk8s2NlnqLNUCPMnH0g> <xmx:ibr7aVREEu9iTgGVsD0EHBYYe6KDRtA0ilaTn3MWotylf8Sfan4nUQ> <xmx:ibr7aTCFv6ouhnX2SkKIdvHaVMrqSQH3sZPtdnj84t_3tufmimoddA> <xmx:ibr7aUgIdHdvNqVKu_mFCg9zUEs2Bm8M34cr86Tess5NuYxhwJXOucoC>
Feedback-ID: i99214975:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA for <tsvwg@ietf.org>; Wed, 6 May 2026 18:02:49 -0400 (EDT)
From: Dick Brooks <dick@businesscyberguardian.com>
To: tsvwg@ietf.org
Date: Wed, 06 May 2026 18:02:47 -0400
Organization: Business Cyber Guardian
Message-ID: <15ec01dcdda4$13e5e200$3bb1a600$@businesscyberguardian.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_15ED_01DCDD82.8CD44200"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AdzdpBKLdjTsy6j7QzKoMxAOtjDBgA==
Content-Language: en-us
Message-ID-Hash: SA5W3SL4SRLEVEUI35NIBTMSZ2EGVTXU
X-Message-ID-Hash: SA5W3SL4SRLEVEUI35NIBTMSZ2EGVTXU
X-MailFrom: dick@businesscyberguardian.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tsvwg.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Reply-To: dick@businesscyberguardian.com
Subject: [tsvwg] Introduction and new Internet draft URI scheme for Zero Trust Identity assertion, ztdnaid
List-Id: Transport Area Working Group <tsvwg.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tsvwg/BjbXdw0lEZoIgmEl7qL_xDQG1PA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tsvwg>
List-Help: <mailto:tsvwg-request@ietf.org?subject=help>
List-Owner: <mailto:tsvwg-owner@ietf.org>
List-Post: <mailto:tsvwg@ietf.org>
List-Subscribe: <mailto:tsvwg-join@ietf.org>
List-Unsubscribe: <mailto:tsvwg-leave@ietf.org>
Hello, My name is Dick Brooks and I primarily work on the IETF SCITT work Group. My Company implements a "Trust Registry", called SAG-CTR, that is used to verify trust in digital objects, entities and resources. We create Zero Trust Proxy Gateway products that accept a Zero Trust Identity assertion, called a ZTDNAID, which is used to verify trust in a Zero Trust interactions with a Resource that is protected by a Zero Trust Gateway. I just want to make you aware of a new Internet Draft describing the ztdnaid URI scheme that will be used to assert a Zero Trust identity by an Entity/Subject requesting access to a Resource protected by a Zero Trust Gateway, following NIST SP 800-207 standards [SP800207]. The ztdnaid Internet-draft is available here: https://www.ietf.org/archive/id/draft-brooks-ztdnaid-new-00.txt [SP800207]: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207.pdf Thank you for the opportunity to introduce myself and this new Internet Draft. I'm happy to answer any questions Thanks, Dick Brooks Active Member of the CISA Critical Manufacturing Sector, Sector Coordinating Council - A Public-Private Partnership Lifetime IEEE Member <https://reliableenergyanalytics.com/products> Never trust software, always verify and report! T Risk always exists, but trust must be earned and awarded.T <https://businesscyberguardian.com/> https://businesscyberguardian.com/ Email: dick@businesscyberguardian.com Tel: +1 978-696-1788