Re: I-D Action: draft-ietf-httpbis-message-signatures-12.txt

[Justin Richer <[e-mail]>]

Not a lot here: 

 - added a new algorithm definition based on feedback from a large implementor (ECDSA on curve P-384)
 - shuffled around the security considerations into categories
 - added the “context” parameter for applications to use as an application-specific label

All issues tagged “signature” are closed, and the editors believe that this document is ready for last call.

Chairs, we would like to start the WGLC process.

 — Justin

> On Sep 20, 2022, at 6:20 PM, [e-mail] wrote:
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the HTTP WG of the IETF.
> 
>        Title           : HTTP Message Signatures
>        Authors         : Annabelle Backman
>                          Justin Richer
>                          Manu Sporny
>  Filename        : draft-ietf-httpbis-message-signatures-12.txt
>  Pages           : 99
>  Date            : 2022-09-20
> 
> Abstract:
>   This document describes a mechanism for creating, encoding, and
>   verifying digital signatures or message authentication codes over
>   components of an HTTP message.  This mechanism supports use cases
>   where the full HTTP message may not be known to the signer, and where
>   the message may be transformed (e.g., by intermediaries) before
>   reaching the verifier.  This document also describes a means for
>   requesting that a signature be applied to a subsequent HTTP message
>   in an ongoing HTTP exchange.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-httpbis-message-signatures/
> 
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-httpbis-message-signatures-12.html
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-httpbis-message-signatures-12
> 
> 
> Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts
> 
> 
>