Skip to main content

Delegated Authority for Bootstrap Voucher Artifacts
draft-richardson-anima-voucher-delegation-01

The information below is for an old version of the document.
Document Type
This is an older version of an Internet-Draft whose latest revision state is "Replaced".
Expired & archived
Authors Michael Richardson , Liang Xia
Last updated 2020-09-10 (Latest revision 2020-03-09)
Replaced by draft-ietf-anima-voucher-delegation
RFC stream (None)
Formats
Additional resources
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:

Abstract

This document describes an extension of the RFC8366 Voucher Artifact in order to support delegation of signing authority. The initial voucher pins a public identity, and that public indentity can then issue additional vouchers. This chain of authorization can support permission-less resale of devices, as well as guarding against business failure of the BRSKI [I-D.ietf-anima-bootstrapping-keyinfra] Manufacturer Authorized Signing Authority (MASA).

Authors

Michael Richardson
Liang Xia

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)