ZTXP — Zero Trust eXchange Protocol

ZTXP defines a lightweight, vendor-neutral protocol for exchanging signed Trust Assertion Messages (TAMs) between Zero Trust components.
Where TLS secures the transport, ZTXP secures the meaning — the who/what/why of trust.

Specification

The current working draft is available at: spec/draft-ztxp-02.md

Reference Implementation

A minimal Python toolkit for signing, verifying, and evaluating TAMs: reference/ztxp-v0.2.py

License

Licensed under the Apache 2.0 License.

Contributing

Issues and pull requests are welcome.
Please see the CONTRIBUTING.md for style and submission guidelines.