Tamga Network

Chapter 7 · 4/5

For states

How a state publishes its own trust list and takes the list over from the provisional operator.

6 min

Governance rolesThe network's rules sit in the middle; the operator, the registrar and the state lists work by those rules.Network rulesTamga ARFOperatorRegistrarState lists

Tamga Network's founding principle: each state owns its own list. A country decides which of its institutions may issue credentials; it does not decide who enters another country's list.

Where things stand today

Today Tamga operates Türkiye's list provisionally, on the state's behalf; the list says so explicitly. Places are reserved for the other Turkic states. The network was built for many states from day one: identifiers, the list format and the rules do not change when a state joins.

Two paths for a state

1. Publishing its own list

The state, or a body it authorises, publishes its own trust list in the format Europe uses (ETSI TS 119 602). Tamga's list of trusted lists then shows that list with four pieces of information:

  • the list's publication address;
  • the pinned fingerprintA short, unique digest of a certificate; any change is noticed at once. of the certificate that signs it;
  • which roles and credential types the list may vouch for (its scope);
  • which decision added it, and when.

The list stays with its owner; Tamga only points to it. A list whose signature does not match is not loaded. If one list is temporarily unreachable, the others are not affected. This is called federationSeparately run lists recognising one another, each staying with its owner..

2. Taking over from the provisional operator

The hand-over happens in steps and invalidates no credential, record or identifier:

  1. National list operation passes to the state; the state's signing certificate is added.
  2. The registrar role passes to the state; Tamga can no longer register anyone in that country.
  3. The national root certificate changes operator, or the state's own root is added.
  4. The place reserved for the state's person identification credential (PIDThe personal identity credential a state issues; in the EU, Person Identification Data.) is filled by the state.
  5. With at least two independent operators, the network moves to the shared-ledger stage.

For wallets and verifiers only the address and the signer change; people do not have to do anything.

The link with Europe

The network can also read EU lists as external lists, with the same federation method. The credentials of a Turkic state's institutions and those of the EU thus speak the same standards. Legal recognition between states is built in the long run through separate agreements with the EU.

Summary

  • Each state owns its list; today Tamga operates Türkiye's list provisionally.
  • If a state publishes its own list, the network points to it through federation; the list stays with its owner.
  • Hand-over happens step by step and invalidates no credential; only the address and signer change.

Go deeper

Technical details and binding rules: