Without specification,
software is incomplete.

The hardest part of the software task is arriving at a complete and consistent specification, and much of the essence of building a program is in fact the debugging of the specification.
— Fred Brooks

Draft Specifications & Working Copies

We aim to provide interoperability, which implies working to open standards. Of course, that may mean creating new standards.

We publish all versions of our specifications here, including expired documents, and those yet to be published elsewhere. The latest version is typically the current working copy.

CAProck Distributed Authorization Scheme

CAProck is a distributed authorization scheme based on cryptographic capabilities [ I-D.draft-jfinkhaeuser-caps-for-distributed-auth ] . This document describes the schemes additional constraints over the base document, and introduces a method for dealing with revocation of authorization. The result is a complete distributed authorization scheme.