draft-ehlers-repsec

RepSec: Post-Breach Data Neutralisation Protocol

groupnone stateactive pages3 rev01 expires2026-10-24 canonicalhttps://datatracker.ietf.org/doc/draft-ehlers-repsec/
This document introduces RepSec, a post-breach data neutralisation protocol designed to reduce the utility of exfiltrated or unauthorised data copies. RepSec operates independently of traditional perimeter and access-control security models by enforcing conditional data usability based on attestation and environmental integrity. The goal is to limit downstream exploitation, resale value, and operational impact of compromised data without disrupting legitimate use.