root@ngallo.it ~ $

Pts

Designing PIC-X: Exposing Configuration through .well-known/pic-x-configuration
reading time: 8 minutes
Designing PIC-X: Exposing Configuration through .well-known/pic-x-configuration.
Designing PIC-X. Exposing Configuration through .well-known/pic-x-configuration.

PIC-X exposes discovery at two levels: a server control-plane document and a per-realm PIC-X discovery document.

The server is not an issuer. A realm is an isolated trust domain and issuer boundary. Realm discovery publishes issuer-scoped endpoints, keys, token-exchange metadata, and PIC authority and continuity capabilities.

/.well-known/server-configuration
        |
        +--> realm: acme
                |
                v
/realms/acme/.well-known/pic-x-configuration

Discovery Model

The server-level document describes the PIC-X instance. The realm-level document describes the issuer clients use for PIC exchange and verification.