MeshPKI
MeshPKI describes a family of designs and implementations for providing public key infrastructure in mesh networks. Aimed at dynamic, multi-node environments such as wireless or software-defined meshes, MeshPKI enables secure device authentication and encrypted communication across changing topologies without relying on a single fixed perimeter.
Key goals include distributed trust anchors, automated enrollment, short-lived certificates, scalable revocation, and resilience to node
Architecture commonly features one or more trust anchors that may be distributed or cross-signed; device enrollment
Operation includes device enrollment, certificate provisioning, mutual TLS between mesh peers, periodic renewal, and revocation handling,
Typical use cases include community or enterprise wireless mesh networks, industrial IoT in distributed environments, disaster-response
Security considerations address key compromise, certificate revocation latency, node compromise, supply-chain integrity of enrollment agents, and
It relies on standard PKI primitives such as X.509 certificates, TLS and mTLS; interoperability is pursued through