[dispatch] Proposal for New Work: OODA-HTTP — Adaptive Security Framework for HTTP/HTTPS

[Rachid Bouziane <[e-mail]>]

Dear DISPATCH Chairs,

I hope this message finds you well.

Following a helpful recommendation from the IETF Secretariat, I would 
like to submit a new work proposal for your consideration: OODA-HTTP, an 
adaptive security framework that extends HTTP/HTTPS with behavioral 
analysis, runtime telemetry, and contextual response logic.

The draft defines an experimental extension to HTTP that introduces:

A new header (X-OODA-Action) for carrying threat scores and recommended 
actions.

A semantic telemetry layer designed for dynamic mitigation (e.g., block, 
challenge, rotate keys).

Compatibility with TLS coordination and QUIC environments.

Post-quantum resilience and support for behavioral threat models.

The most recent version of the draft is available here:
📄 https://datatracker.ietf.org/doc/draft-secroot-ooda-http/

It has already received constructive feedback from recognized experts 
including:

Rich Salz (TLS/cybersecurity expert, active IETF contributor),

Eric Rescorla (co-author of TLS 1.3, Security AD).

Given the protocol's cross-cutting nature (application layer logic, TLS 
interaction, telemetry semantics), I believe the DISPATCH group is an 
ideal starting point to identify the appropriate venue for this work.

Please let me know if additional information, a call, or a virtual 
presentation would help clarify the scope and goals of the proposal.

Thank you very much for your time and guidance.

Warm regards,
Rachid Bouziane
Founder — SecRoot.io
📧 [e-mail]
🔗 https://secroot.io/ooda-http.html