| Zhiyi | c3837ff | 2016-12-13 17:00:00 -0800 | [diff] [blame^] | 1 | NDN Certificate Management Protocol (NDNCERT) |
| 2 | ============================================= |
| 3 | |
| 4 | NDN certificate management protocol (NDNCERT) enables automatic certificate management in |
| 5 | NDN. In Named Data Networking (NDN), every entity should have corresponding identity |
| 6 | (namespace) and the corresponding certificate for this namespace. Moreover, entities need |
| 7 | simple mechanisms to manage sub-identities and their certificates. NDNCERT provides flexible |
| 8 | mechanisms to request certificate from a certificate authority(CA) and, as soon as certificate |
| 9 | is obtained, mechanisms to issue and manage certificates in the designated namespace. Note that |
| 10 | NDNCERT does not impose any specific trust model or trust anchors. While the primary use case |
| 11 | of the developed protocol is to manage NDN testbed certificates, it can be used with any other |
| 12 | set of global and local trust anchors. |
| 13 | |
| 14 | This specification provides details and packet formats to request certificates, create |
| 15 | certificates after one of the validation mechanism, and how the issued certificate is retrieved |
| 16 | by the original requester. |
| 17 | |
| 18 | [See detail on our github wiki page.](https://github.com/named-data/ndncert/wiki/NDN-Certificate-Management-Protocol) |