From 5e7d0374ff85faa63db64becbede34cfbd717311 Mon Sep 17 00:00:00 2001 From: Hannes Tschofenig Date: Sat, 20 Jul 2024 19:57:45 +0200 Subject: [PATCH] Initialization and Bootstrapping --- draft-ietf-scitt-architecture.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/draft-ietf-scitt-architecture.md b/draft-ietf-scitt-architecture.md index 322e51d9..037e0fa2 100644 --- a/draft-ietf-scitt-architecture.md +++ b/draft-ietf-scitt-architecture.md @@ -410,11 +410,11 @@ The operator of a Transparency Service MAY update the Registration Policy or the Transparency Services MUST ensure that for any Signed Statement they register, enough information is made available to Auditors (either in the Append-only Log and retrievable through audit APIs, or included in the Receipt) to reproduce the Registration checks that were defined by the Registration Policies at the time of Registration. -### Initialization and bootstrapping {#ts-initialization} +### Initialization and Bootstrapping {#ts-initialization} Since the mandatory Registration checks rely on having registered Signed Statements for the Registration Policy and trust anchors, Transparency Services MUST support at least one of the three following bootstrapping mechanisms: -- A built-in default Registration Policy and default trust anchors; +- Pre-configured Registration Policy and trust anchors; - Acceptance of a first Signed Statement whose payload is a valid Registration Policy, without performing Registration checks - An out-of-band authenticated management interface