I am looking into using the X.509 for mutual delegation where mutual delegation is bi-directional where an entity can only delegate a task or a set of permissions to another entity if the latter is also permitted to delegate back a different task or set of permissions to the first entity
the above is a theoretical secarino where i am trying to create a protocol to solve
this protocol is entirely theoretical but i would like to make it as real world as possible
it is for a school project
i have drawn a rough sketch of what i think is a possible solution, would a protocol like the one below work ? if not what issues would it have ?
Also if the above example is ok, what message would A have to send to the server to state it has roles to delegate to B etc