attachment
<div dir="ltr"><div>Hi,</div><div><br></div><div>To replace "Trusted Root" in IPP OAuth Extensions, I suggest "Trust Anchor"<br></div><div>from my latest ballot draft of SAE J3323 Trust Anchors and Authentication:</div><div><br></div><div><br></div><div>3.114 Trust Anchor<br><br>A public or symmetric key that is trusted because it is directly built into hardware or software, or securely provisioned via out-of-band means, rather than because it is vouched for by another trusted entity (e.g. in a public key certificate). A trust anchor may have name or policy constraints limiting its scope. [NISTSP800-63-3]<br><br>1. An authoritative entity for which trust is assumed. In a PKI, a trust anchor is a certification authority, which is represented by a certificate that is used to verify the signature on a certificate issued by that trust-anchor. The security of the validation process depends upon the authenticity and integrity of the trust anchor’s certificate. Trust anchor certificates are often distributed as self-signed certificates. [NISTSP800-57pt1r5]<br>2. The self-signed public key certificate of a trusted CA. [NISTSP800-57pt1r5]<br></div><div><br></div><div><br></div><div>And here are the two referenced documents:</div><div><br></div><div></div><div>NISTSP800-57pt1r5] US NIST, Recommendation for Key Management:
Part 1 – General, SP800-57 Part 1 Revision 5, May 2020.<p class="gmail-Body" style="margin:12pt 0in 0in;text-align:justify;font-size:10pt;font-family:"Arial",sans-serif;color:black">
<a href="https://doi.org/10.6028/NIST.SP.800-57pt1r5" style="color:blue;text-decoration:underline">https://doi.org/10.6028/NIST.SP.800-57pt1r5</a><span></span></p>
</div><div>
<p class="gmail-Body" style="margin:12pt 0in 0in;text-align:justify;font-size:10pt;font-family:"Arial",sans-serif;color:black">[NISTSP800-63-3] US NIST, Digital Identity Guidelines,
SP800-63-3, June 2017.<br>
<a href="https://doi.org/10.6028/NIST.SP.800-63-3" style="color:blue;text-decoration:underline">https://doi.org/10.6028/NIST.SP.800-63-3</a><span></span></p>
</div><div><br></div><div>Cheers,</div><div>- Ira</div><div><br></div><div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><i><font size="1">Ira McDonald (Musician / Software Architect)</font></i></div><div><i><font size="1">Chair - SAE Trust Anchors and Authentication TF<br></font></i></div><div dir="ltr"><i><font size="1">Co-Chair - TCG Trusted Mobility Solutions WG</font></i></div><div><i><font size="1">Co-Chair - TCG Metadata Access Protocol SG<br></font></i></div><div dir="ltr"><i><font size="1">Chair - Linux Foundation Open Printing WG<br>Secretary - IEEE-ISTO Printer Working Group<br>Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG<br>IETF Designated Expert - IPP & Printer MIB<br>Blue Roof Music / High North Inc<br><a style="color:rgb(51,51,255)" href="http://sites.google.com/site/blueroofmusic" target="_blank">http://sites.google.com/site/blueroofmusic</a><br><a style="color:rgb(102,0,204)" href="http://sites.google.com/site/highnorthinc" target="_blank">http://sites.google.com/site/highnorthinc</a><br>mailto: <a href="mailto:blueroofmusic@gmail.com" target="_blank">blueroofmusic@gmail.com</a><br>(permanent) PO Box 221 Grand Marais, MI 49839 906-494-2434</font></i></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>