WG Last Call: draft-ietf-httpbis-secondary-server-certs-02 (Ends 2026-09-06)

Mark Nottingham via Datatracker <noreply@ietf.org> Mon, 17 August 2026 05:59 UTC

Received: by mail2.ietf.org (Postfix) id A5ED312ACFADE; Sun, 16 Aug 2026 22:59:56 -0700 (PDT)
Delivered-To: ietfarch-httpbisa-archive-bis2juki@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id A17FC12ACFADD for <ietfarch-httpbisa-archive-bis2Juki@mail2.ietf.org>; Sun, 16 Aug 2026 22:59:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1786946396; bh=XHBMGeG8kX4pvWN0k9ez6D5U7u1wgndRwYRdbwj0ars=; h=Resent-Date:From:To:Reply-To:Date:Subject:Resent-From: Resent-Sender:List-Id:List-Help:List-Post:List-Unsubscribe; b=e++m/TzxG7apEyKoFKe3BhAvpU07JwejkJX2uupnpQXeBO633SmJmbcrsEBAzIask +StX5XH72ukEtpNoN6v3IxtfBK3PmOe7MCUOyOLv1DIlruCk2r03TaRS0sDCnsQrD9 E+LAJZaHDlFSris2LfcTk7/5Qyx3y25UhqnsJlhw=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -5.401
X-Spam-Level:
X-Spam-Status: No, score=-5.401 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="gMG8XE9B"; dkim=pass (2048-bit key) header.d=w3.org header.b="G/ysHsvw"; dkim=pass (2048-bit key) header.d=ietf.org header.b="LqJ+0SIj"; dkim=pass (1024-bit key) header.d=ietf.org header.b="qfZPiMRh"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UxShzzlS-yRY for <ietfarch-httpbisa-archive-bis2Juki@mail2.ietf.org>; Sun, 16 Aug 2026 22:59:56 -0700 (PDT)
Received: from mab.w3.org (mab.w3.org [IPv6:2600:1f18:7d7a:2700:d091:4b25:8566:8113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 29ACD12ACFAD8 for <httpbisa-archive-bis2Juki@ietf.org>; Sun, 16 Aug 2026 22:59:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:Date:Message-ID:Reply-To:To:From:Content-Type:MIME-Version:Cc :In-Reply-To:References; bh=IRTou6VSEfAQ3rWDZ05nzpt+6OQElhWjUclCRnQiMX8=; b=g MG8XE9BS3vCDQpwKGPhSESndVI5RrrRUVyTu8skHzTllqiQn2Ef7lygZRtBMPSPQKA/oE0K9sfra/ cIHNXPqAb9BNCyXTq58mfDYmSou/GtJj/68fUKfKYPg7/ZLIfzdQT2rtTxofvwdgUu1jWSj9wLtaz O0YbwJdadssAkRTRbcFpLYGPVJICEPAQshG3bVnET6IX5bdSw31pAxDQkWiOvNIkNSGPt+eYhGxSk lD5ymD7Rl45YM4IR4zG3LHJqA/0t5cOYyRTybdEHM8SvwaRrTxhy0AkYiRB29uWNkQ0Yat5/HOAZa SnyAW07xTDRXrjVvzTd6s2bs65z/aB84A==;
Received: from lists by mab.w3.org with local (Exim 4.98.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1wvqMw-00000007c1w-2RN3 for ietf-http-wg-dist@listhub.w3.org; Mon, 17 Aug 2026 05:58:46 +0000
Resent-Date: Mon, 17 Aug 2026 05:58:46 +0000
Resent-Message-Id: <E1wvqMw-00000007c1w-2RN3@mab.w3.org>
Received: from ip-10-0-0-144.ec2.internal ([10.0.0.144] helo=pan.w3.org) by mab.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from <noreply@ietf.org>) id 1wvqMt-00000007c0x-0fma for ietf-http-wg@listhub.w3.internal; Mon, 17 Aug 2026 05:58:43 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Date:Message-ID:Reply-To:Subject:To:From:Content-Type:MIME-Version:Cc :In-Reply-To:References; bh=IRTou6VSEfAQ3rWDZ05nzpt+6OQElhWjUclCRnQiMX8=; t=1786946323; x=1787810323; b=G/ysHsvwpBa7E0WSRhxVZcKjdgKZgASgb7ZPrsb+i/17c1i kPdnkzG18jRS6Wf5iJMtJYgRNXJG+qzICPaoQkFFteg2Tk+ovnQefAeMfJdfpD4ghgOGcST1k462Y eTUAa7HFY1GAoYULO6fdi6lm3vGM8wXmHy99o5HJ7KUy6HvCZChXekH5TaTXVoVS1yQiKE74PlLsZ W+SbzxCnLUcL2Zxup4l4V42LFNmPdmp5oAEdfk1FkKy5FEjDXb3ZU0NUxR4ewxA/e8zCA6sH1zk2J ylZJjffBGet6+gmzXhfHUl4+KR5ufcOSoFZDpmL0YVhRTWf7wcwHrgEL+7KY7xbw==;
Received-SPF: pass (pan.w3.org: domain of ietf.org designates 166.84.7.34 as permitted sender) client-ip=166.84.7.34; envelope-from=noreply@ietf.org; helo=relay01.ietf.org;
Received: from relay01.ietf.org ([166.84.7.34]) by pan.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from <noreply@ietf.org>) id 1wvqMs-00000009dLF-1iic for ietf-http-wg@w3.org; Mon, 17 Aug 2026 05:58:43 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf-p2; t=1786946319; bh=XHBMGeG8kX4pvWN0k9ez6D5U7u1wgndRwYRdbwj0ars=; h=From:To:Subject:Reply-To:Date:From; b=LqJ+0SIjkdGOHoF0SzPjCvBMJ7r4V/TjqpyxdIW2M0EdKMM1WSbMopqByvEF4CZ45 NgETUsmG+dOjQy+IDm6xoACuUvaeG+UBvpAWkEzId9/zMrPc9kopPQ0HN9MsLDNKoZ HD8SvjAnDxg2noHRuzucPW4TMxgC6Xb9DpdyodWDCD1Eg2VjWTLW3t7SlvuGi6X6G5 xADIp4bVWe708BT76gJ37O+ru70cJ/yAzfSVl8p1PYlQV1RjABA9O4N2Gv0S9x0p++ 9dgeDuazbnGLlJJIK1HeYXwuCkeCQinw/on3D4ofDa8zWA2Sro6oKtmX40njm1Au6h 8C+W80mzKEU6Q==
Received: from mail2.ietf.org (mail2.ietf.org [166.84.6.31]) by relay01.ietf.org (Postfix) with ESMTPS id 2706F426CC for <ietf-http-wg@w3.org>; Mon, 17 Aug 2026 05:58:39 +0000 (UTC)
Received: from [10.244.8.14] (gaia.k8s.ietf.org [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id 1027A12ACFA51; Sun, 16 Aug 2026 22:58:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1786946319; bh=XHBMGeG8kX4pvWN0k9ez6D5U7u1wgndRwYRdbwj0ars=; h=From:To:Subject:Reply-To:Date; b=qfZPiMRhIE9icgrBP9efcYCYqIE01qtUPJzNzW6zaykloKrdM/5FPBxZ3pfSo4jIl JTdARakrwrbkhOiGYcCmablSH/iFhygm4+jpycLVoV3S5Fd5fBMrHEPR2AI8aEdfLO Twjv2SAAoIeUVd58aB5RaXrYjnmbWnuyPR2jP3wE=
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Mark Nottingham via Datatracker <noreply@ietf.org>
To: draft-ietf-httpbis-secondary-server-certs@ietf.org, httpbis-chairs@ietf.org, ietf-http-wg@w3.org
X-Test-IDTracker: no
X-IETF-IDTracker: 12.71.0
Auto-Submitted: auto-generated
Reply-To: Mark Nottingham <mnot@mnot.net>
Message-ID: <178694631900.432144.13849313408378202099@dt-datatracker-7c6ddbc678-86d5j>
Date: Sun, 16 Aug 2026 22:58:39 -0700
X-W3C-Hub-DKIM-Status: validation passed: (address=noreply@ietf.org domain=ietf.org), signature is good
X-W3C-Hub-Spam-Status: No, score=-4.4
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.342, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: pan.w3.org 1wvqMs-00000009dLF-1iic 8b20046dd86c1cef7ff7a51659e08d77
X-Original-To: ietf-http-wg@w3.org
Subject: WG Last Call: draft-ietf-httpbis-secondary-server-certs-02 (Ends 2026-09-06)
Archived-At: <https://www.w3.org/mid/178694631900.432144.13849313408378202099@dt-datatracker-7c6ddbc678-86d5j>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/54095
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

This message starts a WG Last Call for:
draft-ietf-httpbis-secondary-server-certs-02

This Working Group Last Call ends on 2026-09-06

Abstract:
   This document defines a way for HTTP/2 and HTTP/3 servers to send
   additional certificate-based credentials after a TLS connection is
   established, based on TLS Exported Authenticators.

File can be retrieved from:
https://www.ietf.org/archive/id/draft-ietf-httpbis-secondary-server-certs-02.txt

Please review and indicate your support or objection to proceed with the
publication of this document by replying to this email keeping
ietf-http-wg@w3.org in copy. Objections should be explained and suggestions
to resolve them are highly appreciated.

Authors, and WG participants in general, are reminded of the Intellectual
Property Rights (IPR) disclosure obligations described in BCP 79 [1].
Appropriate IPR disclosures required for full conformance with the provisions
of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any.
Sanctions available for application to violators of IETF IPR Policy can be
found at [3].

Thank you.

[1] https://datatracker.ietf.org/doc/bcp78/
[2] https://datatracker.ietf.org/doc/bcp79/
[3] https://datatracker.ietf.org/doc/rfc6701/

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-httpbis-secondary-server-certs/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-httpbis-secondary-server-certs-02.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-httpbis-secondary-server-certs-02