HTTP Message Signature Libraries

Justin Richer <jricher@mit.edu> Mon, 18 March 2024 00:17 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=ietf.org@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EA9CDC14F5E5 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sun, 17 Mar 2024 17:17:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.509
X-Spam-Level:
X-Spam-Status: No, score=-6.509 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_BL_SPAMCOP_NET=1.347, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="Qg+Nu/E+"; dkim=pass (2048-bit key) header.d=w3.org header.b="a0doWt9g"; dkim=pass (1024-bit key) header.d=mit.edu header.b="ednvba5V"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kyLVjd46R-f6 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sun, 17 Mar 2024 17:17:04 -0700 (PDT)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D16E1C14E515 for <httpbisa-archive-bis2Juki@ietf.org>; Sun, 17 Mar 2024 17:17:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:MIME-Version:Content-Type:Message-ID:Date:To:From:Cc:Reply-To :In-Reply-To:References; bh=tQfmnle7XF7vRwSXSYdVf2TM8OQsXZ4dH0Bpmw7Va5A=; b=Q g+Nu/E+YSau7ukoZHuEdXiXl2SsTB4FhsgrPJu9BOLG19Mr/PxHWl/myZe/ZFOikGQVkZBv3Q2iWb XoG0+lVN7yxunZbGSFGUnR11JWoo1kcDdcq+Zx03zM1rXz17HIeM7vxougP6IzUeVxBewB1hK55gs OUkFuHStjzE/DwvN3L1yYqQ2PgpRxIHS4yxA7mjsXjUw4XbKSysoaJG0DRusIH9S2l/eOfQ9L0XX/ bsvsZJXIY7v1ZqT37hwePQl8XkYi+QxoURA4iEqC6fIXMIrjfRXQT+gHHIqAtG3sM2ahAjWWXJigs ZowPa2c9GL0komYoDw7yewzArvKjCnb8w==;
Received: from lists by lyra.w3.org with local (Exim 4.94.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1rm0gH-00FOUw-B6 for ietf-http-wg-dist@listhub.w3.org; Mon, 18 Mar 2024 00:16:45 +0000
Resent-Date: Mon, 18 Mar 2024 00:16:45 +0000
Resent-Message-Id: <E1rm0gH-00FOUw-B6@lyra.w3.org>
Received: from pan.w3.org ([3.222.182.102]) by lyra.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <jricher@mit.edu>) id 1rm0gE-00FOTv-Um for ietf-http-wg@listhub.w3.org; Mon, 18 Mar 2024 00:16:42 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=MIME-Version:Content-Type:Message-ID:Date:Subject:To:From:Cc:Reply-To :In-Reply-To:References; bh=tQfmnle7XF7vRwSXSYdVf2TM8OQsXZ4dH0Bpmw7Va5A=; t=1710721002; x=1711585002; b=a0doWt9gi3G7Boh/STMcwS/tecpRXY41fqwed+3Tlv0r5xj MDCBMpT4tN62gDScRyPpiayP6JL5fhR4VLZmv1VuWLkjAqA4SIiJLUhXz3GxulvExslk70s4SaxU3 guQp/b0uGKZClkB0vtsPWCGzdHI3YeGLdMwo+Q4DG7gXtAgdEV15VXe9EZx36159x3ZYz3JD+NipE 2+Vv6JUSJIHPK74H06rhlLbc2fOvMclhK8TozVHORMVoFAtLWVYqpjZbMUBe9ctCRt6ltiTz2xw+/ 3RV54UHuXrVmNSt9ymoZRxxjbXHJ14chBLH7XM1gFzshVyVXPxNyolVmvzl6Vt7Q==;
Received-SPF: pass (pan.w3.org: domain of mit.edu designates 40.107.223.108 as permitted sender) client-ip=40.107.223.108; envelope-from=jricher@mit.edu; helo=NAM11-DM6-obe.outbound.protection.outlook.com;
Received: from mail-dm6nam11on2108.outbound.protection.outlook.com ([40.107.223.108] helo=NAM11-DM6-obe.outbound.protection.outlook.com) by pan.w3.org with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <jricher@mit.edu>) id 1rm0gE-00CUMs-0e for ietf-http-wg@w3.org; Mon, 18 Mar 2024 00:16:42 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=KvrWYLXWMzpG1d0/ZcwucAks/B0baj2/JG7hmh/NP5C2kCDiEDemYfQEhyHrxtzvhBM3OjFtp8NNOQMAitMA+27mrnPegrRZibt1/PXTf9b0a36o+bVu1j3aY4tHOsymePKiLk0VS2XM1Tk8Rxc2+3+Nx88z/ZsMpiZsP0x1A6p2GyvMyppt7yHx1UTN2sRF1gl85Xv14nnyuUBQznT8b0h1qbS+hrSYrA2DJ8T9g48xXBGGVnDTYNoyKRuNh/RQfDvzRUnw+hLwabP04gXAamOCP4PHrBnV/A7Gr9u19NpTI9RBJCHJVzHRk+7kutlyNVLlKPATGuuaYnPRzDOQbQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=tQfmnle7XF7vRwSXSYdVf2TM8OQsXZ4dH0Bpmw7Va5A=; b=a+fiIMf2oFlqQwoF5FZVeX/bZIGWAbOe5Y/Nbjp1+g+uBR0xJPGUEBX3RE3LG0X/TIQYWViPoEuzmwHS3MF0KqTLcfjuCS8nVB1jQ8c5flJL30biQ6llJSRM2i6RQjROfzdWo0iyg02j21mGCgnYIuMNmK1WhqrcEqwJkw/bcY/OuiATP/g9OQZb57AE5H0ZgP6LQBM0P5v9D+PQmLAiSoCVosxajBfFbnY1upF9p13dKmT8f/N+4BP2Kkb6fJYDXK2DWdDowHJGdP0F8JOvDp7+wenc4qOi6vXCFwd81ViKotixW11mMdew+gjC9nSziM9ZHHKdnuFxYESKFMGqEg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=mit.edu; dmarc=pass action=none header.from=mit.edu; dkim=pass header.d=mit.edu; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tQfmnle7XF7vRwSXSYdVf2TM8OQsXZ4dH0Bpmw7Va5A=; b=ednvba5Vi7clF3cpX5ZKRKd89bDYBsOfdN+vMrCyk6r4YQDioKgfyn7U+IHaV14e2c8iet9UFDzaFlZ12eWuAz4eVt6uuj9n65CqMrqVB0bLEmMWew5kvPTbiUV7A6UTAHyD/0Tc9is9Shpxk7/uIviGX9o9DrotfC14wY4QU04=
Received: from LV8PR01MB8677.prod.exchangelabs.com (2603:10b6:408:1e8::20) by CH0PR01MB7139.prod.exchangelabs.com (2603:10b6:610:f6::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7386.26; Mon, 18 Mar 2024 00:16:37 +0000
Received: from LV8PR01MB8677.prod.exchangelabs.com ([fe80::167:b38f:bb84:ecef]) by LV8PR01MB8677.prod.exchangelabs.com ([fe80::167:b38f:bb84:ecef%3]) with mapi id 15.20.7386.025; Mon, 18 Mar 2024 00:16:37 +0000
From: Justin Richer <jricher@mit.edu>
To: HTTP Working Group <ietf-http-wg@w3.org>
Thread-Topic: HTTP Message Signature Libraries
Thread-Index: AQHaeMmKHGOo+YeRs0CqhuIUdcj2dA==
Date: Mon, 18 Mar 2024 00:16:37 +0000
Message-ID: <6C06DEF4-BB37-445E-87C1-15D34E9742FC@mit.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=mit.edu;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: LV8PR01MB8677:EE_|CH0PR01MB7139:EE_
x-ms-office365-filtering-correlation-id: ff1de7b4-a99a-43fc-0226-08dc46e0ad22
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:LV8PR01MB8677.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230031)(376005)(1800799015)(366007)(38070700009);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: D41iv4hQOpRelWx357dTZAxW3atNnWnGwigNcMqykbKfweLFfR3zLpwjYwtOMuwpHohMV7o0HhewRpIKvFQ/+Y3gbjkiAycCoA9W9nEIqxIRig0QRQ+HEO8E+P1L6bYetUAJimLcMsMTiA93+LfUb9HRaWAxuzU9tqdWEhZeR1iwFFhzvWBvVMd4TllZcrs2dOMRyYOLtuxCBAgiICTG/aCiD2Mvf+hETPkUJTIc6szmfqj5Q6VrkFqLIiXQZB+zNtL3nXUWi54rUqZ79GFXzdkPuH2Y/C0tLevdBWvyIChlV1eWV+S7OeSUT4DAFAbvnKg+LJ14gFFwky5Lwsubjig2/LWmSabe262X0ujPI3cUoneDyHze0pmfCXkvZW5ZYFNcBAjG7Fl9+uPWUAx4lqH86VrEYxFMqaaG37uL2zKGh8JrPRHpxzwTRylyh3/QQBIXf/HbAb+zUKxvIlowpmXImQF58okp29Z7Ua1KlHO89FT8KjBa6TUB9hItGAveplvwlDnRui5DCmkZPM8l8SUiFn0CYJsKa7J9MMaeuyX1/7H7j7gWRaA5ydGaY43aS0rH/B1zDZwYHo2kx72RCRHmOMdHF/vh/qbieu8gj+9VPwV96ihjEmQaI/UVeIiS1rd/BailWypN78FL2nVdHmFWIiftOJbxRVo+9cSrA/e/HEIUyhusVcw8h8RQNe42osQJ4OX3K5Mqwc+RtPUink9adq6ZyOaArhOlHys5aBP/L1P8xop5vdGLDafOoEOnq9/0OiWqZA4B9wBtLIsfHr3L+fbydDBpxPQSwl5Q7rVugLPkab+34KbcDE02L/WcIH4EKdyKR8UpGgGHm16Z5AY1W7S6SRcnGKu99wVWSp5HXLiF3MMR9VIpBiDcS9wXxpHbFvmtwfxOBTb25Tm8zAwP0YV0kVhMUlY3RX2n97lDW/jFIZtHfNNOwYq71EVWW2WoJBT8WL8GBGnK0b5R2Ticvh+Rvs4CiDm+2rthCXdv7N/BMPKgmWcbp8+vbXe8DxcU9Cfzy442I3X+4QbpVkDWviJMjfuTH8Sc9kA+Z1sU4FN4Ztzq/mZZG7YD+6XSuSFw2hbF6MPGwbls0i5TA1tj4pWR47SArMIIkp+4LlnybZJKmAVWtoqYZIpVisAHmNjz69FxljwRJ11+5KLsdYWCnsJAAkDqXt6hC5Dc01LPP2XecRMJNw0WUrHHjz73Sqlc0UcVlslUuVpvJi66rGLHbXGdiLUYYTefgA2nhos8ORcbXi/voTkAWffxzrFw6zuvGbpa+pllDATWcNPWG8TH0vYw3pdSkmIYQWmte8z0DaTvxLqwX1FIErT0FuozGo6Nn3dqoWAe6JTZHzaR93oWJ5o1AkUN43fIH/g7z2o6iuyg28jibxB/RFpP2G4fzBMMf3HA0t16lD+BniNbT+d08DPdKKjbVoWErIJIBoWQYRtJ9hQNJsgj/S8XogJhyqSeb3sRljsBEqP1TT/zNN/BJzakWD7qTJjOSzXZns2b8rYW1hNs4WZvE8s+ze1hfesfllJJFLxUB+Ssiqt7tOpJLj8y2uvzToYF86o6TpjnyKym7Z3w91FoG9Nr2t12bg9Lhb/gJC3Z/sXgf8nu43tamNjQgmx2XiAuxgUDfZBO6dpo64i0lA8Q9rsyS+Ef
Content-Type: multipart/alternative; boundary="_000_6C06DEF4BB37445E87C115D34E9742FCmitedu_"
MIME-Version: 1.0
X-OriginatorOrg: mit.edu
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: LV8PR01MB8677.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ff1de7b4-a99a-43fc-0226-08dc46e0ad22
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Mar 2024 00:16:37.0705 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: o6izNdrLHiaZfshqIS9dsXAukQ16SoWV9X8I+3RXrYyf1X7EUqMv6CGCTHQKpLRp
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH0PR01MB7139
X-W3C-Hub-DKIM-Status: validation passed: (address=jricher@mit.edu domain=mit.edu), signature is good
X-W3C-Hub-Spam-Status: No, score=-4.9
X-W3C-Hub-Spam-Report: ARC_SIGNED=0.001, ARC_VALID=-0.1, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, HTML_MESSAGE=0.001, RCVD_IN_BL_SPAMCOP_NET=1.347, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_WL=-1
X-W3C-Scan-Sig: pan.w3.org 1rm0gE-00CUMs-0e d8ff5afa3bee647c78c3444a06d55d10
X-Original-To: ietf-http-wg@w3.org
Subject: HTTP Message Signature Libraries
Archived-At: <https://www.w3.org/mid/6C06DEF4-BB37-445E-87C1-15D34E9742FC@mit.edu>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/51891
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

Hi all,

With the recent publication of RFC9421, updated https://httpsig.org/ to point to the new document as well as provide a list of libraries and implementations. If you've got an implementation, please submit a PR on GitHub (linked on the page) or get in touch to get it listed.

Thanks,
— Justin