netsec-ethz / rains

RAINS (Another Internet Naming Service)
Apache License 2.0
9 stars 11 forks source link

Added 'CT' Assertion for SCION End Entity PKI #226

Open winterdeaf opened 5 years ago

winterdeaf commented 5 years ago

As part of the implementation effort for the End Entity PKI, a new assertion with "CTProof" type was created. The assertion will contain absence or presence proofs for a certain ISD. The information on the type (absence/presence) of the proof and the particular ISD it is relevant to will be encoded in the subject, in the format: _[ISD_NAME]._[ABS|PRE].example.com

The verification of a presence proof is to be carried out by the client - it will be integrated in rdig when the proofs reach a stable binary format.


This change is Reviewable