Subject: [saag] Vectors of Trust

From: Justin Richer <[email-masked]>
Date: Thu, 21 Jul 2016 13:00:37 -0400

Hi security area folks,

Leif and I have been working on a document called Vectors of Trust that defines a way to express and convey trust information about an authentication event across the wire. Similar in goals to the NIST/OMB Level Of Assurance (LoA) concept, a VoT tells a relying party how trustworthy the identity provider believes the current authentication transaction to be. Unlike LoA, which is a single scalar element, VoT allows differentiation on different aspects of the transaction, like identity proofing, credential strength, assertion presentation, etc. The current draft is available here:

https://tools.ietf.org/html/draft-richer-vectors-of-trust-03

The discussion list is [email-masked] (low traffic, and most of the active discussion happened months ago) and the GitHub page for the source XML is:

https://github.com/vectorsoftrust/strawman

We would appreciate folks reviewing this document so that it can go forward to eventual publication. We are putting it through as an AD-sponsored RFC, and Kathleen has agreed to sponsor the draft.

Thank you,
 — Justin