[dispatch] Re: Proposal for New Work: OODA-HTTP — Adaptive Security Framework for HTTP/HTTPS

[Lucas Pardue <[e-mail]>]

Hi,

I'm not an expert on the dots work [1], but how does this compare to it?

Cheers
Lucas

[1] https://datatracker.ietf.org/wg/dots/about/

On Wed, Jul 2, 2025, at 21:14, Rachid Bouziane wrote:
> Dear DISPATCH Chairs,
> 
> I hope this message finds you well.
> 
> Following a helpful recommendation from the IETF Secretariat, I would 
> like to submit a new work proposal for your consideration: OODA-HTTP, an 
> adaptive security framework that extends HTTP/HTTPS with behavioral 
> analysis, runtime telemetry, and contextual response logic.
> 
> The draft defines an experimental extension to HTTP that introduces:
> 
> A new header (X-OODA-Action) for carrying threat scores and recommended 
> actions.
> 
> A semantic telemetry layer designed for dynamic mitigation (e.g., block, 
> challenge, rotate keys).
> 
> Compatibility with TLS coordination and QUIC environments.
> 
> Post-quantum resilience and support for behavioral threat models.
> 
> The most recent version of the draft is available here:
> 📄 https://datatracker.ietf.org/doc/draft-secroot-ooda-http/
> 
> It has already received constructive feedback from recognized experts 
> including:
> 
> Rich Salz (TLS/cybersecurity expert, active IETF contributor),
> 
> Eric Rescorla (co-author of TLS 1.3, Security AD).
> 
> Given the protocol's cross-cutting nature (application layer logic, TLS 
> interaction, telemetry semantics), I believe the DISPATCH group is an 
> ideal starting point to identify the appropriate venue for this work.
> 
> Please let me know if additional information, a call, or a virtual 
> presentation would help clarify the scope and goals of the proposal.
> 
> Thank you very much for your time and guidance.
> 
> Warm regards,
> Rachid Bouziane
> Founder — SecRoot.io
> 📧 [e-mail]
> 🔗 https://secroot.io/ooda-http.html
> 
> _______________________________________________
> dispatch mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>