[Ndn-interest] limit the scope of trust-anchor in trust schema

[fotiou at aueb.gr]

Hi Lixia, all

> yes all trust anchors have limited scope, and different trust domains have
different trust anchors.

My question is about  limiting the scope of a trust anchor within a domain.
E.g., in ndn testbed, would be possible to use different trust anchors for
/ndn/edu/Arizona and for /ndn/edu/Memphis?

Best,
Nikos

-----Original Message-----
From: Lixia Zhang <lixia at cs.ucla.edu> 
Sent: Monday, January 15, 2024 5:39 AM
To: Nikos Fotiou <fotiou at aueb.gr>
Cc: Ndn-interest <ndn-interest at lists.cs.ucla.edu>
Subject: Re: [Ndn-interest] limit the scope of trust-anchor in trust schema

Hi Nikos, yes all trust anchors have limited scope, and different trust
domains have different trust anchors.

But I'm not sure how to make this a "requirement" -- NDN offers a protocol
stack and framework to support security in networking, letting different
parties and different applications define their own trust policies. 
As a remote, maybe inappropriate, analogy: BGP routing policy is a necessity
on its own, not a requirement defined by TCP/IP.

maybe I didn't get your question right?

The trust domain concept is first defined in "Trust schemas and ICN: key to
secure home IoT" by Kathleen Nichols, ACM ICN 2021.
We have a recent paper at AINTEC 2023 conference on the design of Hydra
bootstrapping, which made use of trust domain (here is the pointer to the
presentation of that paper:
https://web.cs.ucla.edu/~lixia/papers/2311AINTEC-bootstrap.pdf)

Lixia

> On Jan 14, 2024, at 1:10 PM, Nikos Fotiou via Ndn-interest
<ndn-interest at lists.cs.ucla.edu> wrote:
> 
> Hi,
> I was wondering if it is possible to limit the scope of a trust anchor in
trust schema (e.g., use different anchors for different name prefixes). If
not, has it ever occurred as a requirement? Are you aware of any
paper/report working towards this direction?
> 
> Best,
> Nikos
> --
> Nikos Fotiou - https://www2.aueb.gr/users/fotiou/
> Researcher - Mobile Multimedia Laboratory Athens University of 
> Economics and Business https://mm.aueb.gr
> 
> _______________________________________________
> Ndn-interest mailing list
> Ndn-interest at lists.cs.ucla.edu
> https://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest