Subject: [stir] Credential Formats

From: Russ Housley <[email-masked]>
Date: Fri, 27 May 2016 14:15:13 -0400

In Section 6.4 of rfc4474bis, we are told the four things that must be specified for STIR credential mechanisms:

   In order for a credential system to work with this mechanism, its
   specification must detail:

      which URIs schemes the credential will use in the "info"
      parameter, and any special procedures required to dereference the
      URIs

      how the verifier can learn the scope of the credential

      any special procedures required to extract keying material from
      the resources designated by the URI

      any algorithms required to validate the credentials (e.g. for
      certificates, any algorithms used by certificate authorities to
      sign certificates themselves)

To date, we only have once credential format: certificates.

Is anyone considering another format?  If not, then we can improve interoperability by nailing down that one.

Russ