DataTerminology.comNEW
Frameworks describing how entities establish and evaluate trust, including hierarchical PKI, web of trust, mesh, and bridge models.
DESCRIPTION
Trust models define how authenticity and authority are established and validated among entities. In PKI, hierarchical trust flows from a root CA to intermediates and end-entities. Web-of-trust decentralizes assertions, relying on peer endorsements, as in PGP. Bridge and mesh models interconnect separate trust domains via cross-certification or bridging CAs. Choosing a trust model affects scalability, governance, revocation, and user experience. Modern architectures also adopt zero trust, which treats all networks as untrusted and continuously verifies identities and device posture.
ALTERNATIVE DEFINITIONS
Wikipedia
The web of trust is a concept used in PGP, GnuPG, and other OpenPGP-compatible systems to establish the authenticity of the binding between a public key and its owner.
Highlights decentralized peer-based trust as an alternative to hierarchical CAs.
Wikipedia
A public key infrastructure (PKI) is a set of roles, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates and manage public-key encryption.
Emphasizes hierarchical governance and lifecycle controls typical of PKI-based trust.
RELATED TERMS
Public Key Infrastructure PGP Web of Trust Certificate Authority Bridge Certificate Authority Cross-Certification Root Certificate Certificate Pinning TLS Pretty Good Privacy
COMPETING TERMS
Zero Trust Architecture Perimeter-Based Security
RELATIONS
- Broader: Model
KNOWLEDGE AREAS
Data Security Infrastructure Software Engineering
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Chief Information Security Officer Cloud Architect IT Manager Solution Architect
EXTERNAL SOURCES
- Wikipedia - Trust model
- IETF - Defines hierarchical X.509 trust chains.
- MIT - Explains centralized trust via Kerberos KDC.
- NIST - Resource on zero trust paradigms.
TOP QUESTIONS
What are the main types of Trust Models?
Common models include hierarchical PKI, web of trust, bridge CA, and mesh/cross-certified models. Each differs in governance, scalability, and how trust paths are established.
Category: Concept
How does a hierarchical Trust Model work?
Trust anchors in a root CA delegate to intermediate CAs, creating a chain to end-entity certificates. Clients verify signatures from anchor to leaf, validating the trust path.
Category: Example
When is a web-of-trust model suitable?
It suits decentralized communities where peer endorsements are feasible, such as PGP. It trades central governance for flexibility and user-driven assertions.
Category: Opinion
What risks exist in Trust Models?
Centralized roots can become single points of failure in PKI. Decentralized models risk inconsistent validation and weaker revocation controls.
Category: Risks
How does Zero Trust Architecture relate to Trust Models?
Zero trust shifts from perimeter-based implicit trust to continuous verification. It affects trust assumptions but often leverages PKI for device and workload identity.
Category: Comparison
What is a bridge CA in Trust Models?
A bridge CA establishes trust between separate PKIs by cross-certifying CAs, enabling inter-domain validation without merging hierarchies.
Category: Concept
Why are revocation mechanisms crucial in any Trust Model?
They maintain trustworthiness by signaling compromised or invalid identities, typically via OCSP or CRLs in PKI ecosystems.
Category: Relevancy
What is a hot topic about Trust Models today?
Managing trust across multi-cloud, service meshes, and supply chains, including SPIFFE/SPIRE for workload identity, is increasingly important.
Category: Topic
How do clients validate trust paths in PKI-based Trust Models?
They build a certification path from the presented leaf to a trusted root, verifying each signature and relevant constraints.
Category: Requirements