ATIS/SIP Forum IP-NNI Task Force

 View Only
Back to discussions
Expand all | Collapse all

IPNNI-2026-00144R000.docx uploaded

  • 1.  IPNNI-2026-00144R000.docx uploaded

    Posted 2 hours ago
    Submitter's message
    This contribution updates Section 6 of the ALIII Trust and Certificate Management document IPNNI-2026-00113R002. The contribution integrates text from Section 7 of ATIS-1000084.v004 as appropriate.
    -- Pierce Gorman
    Document Name: IPNNI-2026-00144R000.docx
    Description
    This contribution updates Section 6 of the ALIII Trust and Certificate
    Management document IPNNI-2026-00113R002. The contribution integrates text
    from Section 7 of ATIS-1000084.v004 as appropriate.

    The key ALIII-specific changes were:

    1. Allow a common superior root while requiring distinct ALIII
    issuing/intermediate CA certificates and certification paths from SHAKEN.
    2. Define the Trusted ALIII-CA List so it can identify the ALIII-approved
    path, not merely a shared root certificate.
    3. Extend trust-list lifecycle rules to cover issuing/intermediate CA
    changes, not just root rollover.
    4. Add explicit rollback protection using the sequence value.
    5. State explicitly that trust in a shared SHAKEN root does not imply ALIII
    trust; ALIII authorization must be independently identifiable from the
    Trusted ALIII-CA List and associated certification path.
    Download Latest Revision
    Public Download Link
    Submitter: Pierce Gorman
    Group: ATIS/SIP Forum IP-NNI Task Force
    Folder: 2026
    Date submitted: 2026-08-20 19:53:10