[dispatch] Proposal: OODA-HTTP — Behavioral Extension to HTTP with TLS Coordination

Rachid Bouziane <contact@secroot.io> Wed, 02 July 2025 20:09 UTC

MIME-Version: 1.0
Date: Wed, 02 Jul 2025 16:09:24 -0400
From: Rachid Bouziane <contact@secroot.io>
To: dispatch@ietf.org, dispatch-chairs@ietf.org
User-Agent: Roundcube Webmail/1.6.11
Message-ID: <1985eae0d547f4319de10186ea07b06b@secroot.io>
Organization: SecRoot
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Message-ID-Hash: HNDSNEQNPX4YVL37T7Q3SENP6TBCIFRL
Precedence: list
Subject: [dispatch] Proposal: OODA-HTTP — Behavioral Extension to HTTP with TLS Coordination
Archived-At: <https://mailarchive.ietf.org/arch/msg/dispatch/Zu7UUgLW7q1SZiVegNApVCrILmo>

Hello Dispatch WG,

I'd like to propose OODA‑HTTP as a candidate for new work in the ART 
area.
OODA‑HTTP is a behavioral extension to HTTP/HTTPS and HTTP/3, adding 
dynamic runtime decisions communicated via the X‑OODA‑Action header, 
coordinated with TLS context (quantum resistance, key rotation, etc.).

Key points:
- Problem: current HTTP/TLS lacks mechanisms for real‑time adaptive 
defense.
- Motivation: bot mitigation, behavioral anomaly response, TLS adaptive 
policies.
- Deliverables: HTTP spec extensions + integration guidance with TLS 
environment.
- Interest already received from experts (Rich Salz, Eric Rescorla).
- OODA‑HTTP draft is available: 
https://datatracker.ietf.org/doc/draft-secroot-ooda-http/

Could this be added to the agenda for dispatching at IETF 123?

Thanks,
Rachid Bouziane

[dispatch] Proposal: OODA-HTTP — Behavioral Exten… Rachid Bouziane