scope:

The present document identifies the requirements for allowing Encrypted Traffic Integration (ETI) across an abstracted network architecture. The present document is informed by the ETI Problem Statement [i.1] and the Zero Trust Architecture (ZTA) security model [i.6] and its application, to provide an explicitly trusted commutations environment across all enabled layers of the Open Systems Interconnection (OSI) model. In addition the present document describes a security model, by way of ZTA, that enforces transparency and explicability of the role of security functions, particularly encryption.

NOTE 1: The OSI model [i.3], and the OSI based security model [i.4], [i.5] when implemented may not explicitly enable some layers, in particular layers 5 (Session) and 6 (Presentation) are often implied.

In addition, the present document defines use cases where ETI might not be sufficient to enable a ZTA environment and identifies mitigations to maintain ETI, while adhering to ZTA.

NOTE 2: The ZTA model begins by not trusting anything and builds and reinforces trust continuously during operation.