Tamga Docs

English

Türkçe

English

Türkçe

Appearance

Trust lists and federation ​

A diploma arrives signed, but the signature alone does not answer the question "is the signer really a university?". The answer is in the güven listesi (trust list)Bir ülkenin kök sertifikalarını, belge verenlerini ve kayıtlı relying party'lerini taşıyan imzalı liste. Bugün Tamga'da güven bu listelere dayanır; ortak defter sonra gelir.: a signed, versioned list that shows which institutions (issuersBelgeyi imzalayıp veren kurum: üniversite, meslek kuruluşu, kamu kurumu ya da şirket.) may issue which credential types, which verifiersGösterilen belgeyi denetleyen taraf: imza, belge verenin güven listesindeki kaydı, durum ve politika. Relying party diye de anılır. are registered and which wallet providersCüzdanı sunan ve cüzdan ile anahtar kanıtlarını imzalayan kuruluş. Tamga Wallet ağın ilk cüzdanıdır. are recognised.

Two levels ​

ListWhat it containsAddress
List of Trusted Lists (LOTL)The addresses of the country lists and the certificates that sign them, wallet providers, the schema catalogue, shared settingshttps://trust.tamga.network/lotl.jws
Country listThat country's issuers, verifiers and root certificateshttps://trust.tamga.network/tl-tr.jws

This is the EU trust model: the European Commission publishes a LOTL (List of Trusted Lists)Ülke güven listelerinin adreslerini, imzacılarını ve tanınma durumlarını gösteren imzalı liste. and each member state publishes its own list. The formats map to the ETSI (European Telecommunications Standards Institute)Güven listeleri, imzalar ve güven hizmetleri için teknik standartları yazan Avrupa standart kuruluşu. standards.

A single root key ​

A wallet or a verifier trusts only one thing up front: the fingerprint of the root that signs the LOTL (the güven çapası (trust anchor)Doğrulayıcının ilk güvendiği kök anahtar ya da sertifika; geri kalan her şey ona kadar denetlenir.). You pin the fingerprint in your configuration (https://tamga.network/trust-anchor); the list tells you the rest. Do not interpret the list yourself — the TrustSource interface checks the signature, the version chain and the freshness, and gives you the entries.

ts
import { fetchListTrustSource, verifyJws } from "@tamga-network/trust";

const { source } = await fetchListTrustSource("https://trust.tamga.network", http, {
  rootFingerprints: ["<fingerprint from the trust-anchor page>"],
  verifyJws,
});
const issuer = source.issuer(issuerId); // institution entry: authorised credential types, level, status

Today and tomorrow ​

  • Today: Tamga publishes the Türkiye list on behalf of the national authority, provisionally (operator.status: provisional). The Tamga operator registers issuers and verifiers.
  • Hand-over: when the state, or a body it authorises, publishes its own list, the LOTL points to that list's address and signer. Credentials, wallets and verifiers do not change; institution identifiers (issuer_id) are derived from the certificate, so they stay the same.
  • FederationHer ülkenin kendi güven listesini işlettiği ve listelerin listesinde birleştiği model; Tamga dış listeleri de gösterebilir.: every Turkic state can run its own list; the LOTL brings them together and introduces them to each other. Mutual recognition (for example of EU lists) comes in through the same door. A ledger becomes the shared record of these entries once at least two independent operators take part.

Details ​