RFC 9421 on HTTP Message Signatures

rfc-editor@rfc-editor.org Wed, 14 February 2024 19:10 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=ietf.org@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8336EC14CE5F for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 14 Feb 2024 11:10:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.757
X-Spam-Level:
X-Spam-Status: No, score=-2.757 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, MAILING_LIST_MULTI=-1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="CulaakdV"; dkim=pass (2048-bit key) header.d=w3.org header.b="oRxP+pbx"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OTiPvt4-Hwl1 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 14 Feb 2024 11:10:55 -0800 (PST)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D3F7C4D7DED for <httpbisa-archive-bis2Juki@ietf.org>; Wed, 14 Feb 2024 11:09:23 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:Date:Message-Id:Content-type:Cc:From:To:Reply-To:In-Reply-To: References:MIME-Version; bh=dWZFIoYCYBb0P9jWN7PtS1aUE8NxhC82WpnA569+/Xg=; b=C ulaakdVsfuE7kZM5b23SbMh+yB3PfLtTlPY1VyM/CYfxPczZRmAQML9p9/j0pnhOyMWhw0Biam4OQ 5ezZOkfk5kpZ/WSI4rxGfId1vXvp5RaEX80i2X8dgbhSUB4DhERSxVU5buhFaoePhA1uzyQhAUW/N mEMpjn/4pp4LbDvtYfe/Ozo3PXZIv3HHlsIk1rb++qv/A0NJAG/43MivOz2KEftsMwPGLSB4M/tIw rcT7iLr+QqsEk/Z7GYTb2e6rmarsbIH+BKz6PlY09+mRMrAytLAiojnNc2qWbpceuGlAJhmdHsynu 98XV/gHuxloSAoyYDhh9h0Jnp+oo64t0w==;
Received: from lists by lyra.w3.org with local (Exim 4.94.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1raKbF-005NOJ-Vd for ietf-http-wg-dist@listhub.w3.org; Wed, 14 Feb 2024 19:07:18 +0000
Resent-Date: Wed, 14 Feb 2024 19:07:17 +0000
Resent-Message-Id: <E1raKbF-005NOJ-Vd@lyra.w3.org>
Received: from mimas.w3.org ([128.30.52.79]) by lyra.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <wwwrun@rfcpa.amsl.com>) id 1raKbD-005NND-U7 for ietf-http-wg@listhub.w3.org; Wed, 14 Feb 2024 19:07:15 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Date:Message-Id:Content-type:Cc:From:Subject:To:Reply-To:In-Reply-To: References:MIME-Version; bh=dWZFIoYCYBb0P9jWN7PtS1aUE8NxhC82WpnA569+/Xg=; t=1707937635; x=1708801635; b=oRxP+pbxZEDlSJ0p5sRjD6MrGVQJbKhrkNStMr8JnVh+QdD EAEeiu0I2ht2hK52aZrFBRm4IrIilh/ISltE/yTa5C2CjzucONw8OxjTBUP70nKX11Pi2QLyrnMkv sY+Unf9kCK1eSLuB3DU3XNASuup6I+9bB8l9gHZZ2OD6jSNp2CwEVvdMo5uopRLP35hIzBMctSvRV hzTVumc/E2H3t6ToylNzCCW4ehlxQ4ZoOYQTsLbfjkspkx6WYE+/WsOqIdIeYg1/Ko5rHTM7FmQGZ CK9fAamChx+VawypYQLf9b2AOwJYE8vznjUIGZznbgpi1yqhjD8atZCClcyNPqww==;
Received: from rfcpa.amsl.com ([50.223.129.200]) by mimas.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <wwwrun@rfcpa.amsl.com>) id 1raKbA-00Cqut-Bd for ietf-http-wg@w3.org; Wed, 14 Feb 2024 19:07:15 +0000
Received: by rfcpa.amsl.com (Postfix, from userid 499) id 0E046E5F7D; Wed, 14 Feb 2024 11:07:08 -0800 (PST)
To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org
From: rfc-editor@rfc-editor.org
Cc: rfc-editor@rfc-editor.org, drafts-update-ref@iana.org, ietf-http-wg@w3.org
Content-type: text/plain; charset="UTF-8"
Message-Id: <20240214190708.0E046E5F7D@rfcpa.amsl.com>
Date: Wed, 14 Feb 2024 11:07:08 -0800
Received-SPF: pass client-ip=50.223.129.200; envelope-from=wwwrun@rfcpa.amsl.com; helo=rfcpa.amsl.com
X-W3C-Hub-Spam-Status: No, score=-7.0
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.248, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, W3C_AA=-1, W3C_IRA=-1, W3C_WL=-1
X-W3C-Scan-Sig: mimas.w3.org 1raKbA-00Cqut-Bd 03fd2335c820679d062595514205fba2
X-Original-To: ietf-http-wg@w3.org
Subject: RFC 9421 on HTTP Message Signatures
Archived-At: <https://www.w3.org/mid/20240214190708.0E046E5F7D@rfcpa.amsl.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/51774
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

A new Request for Comments is now available in online RFC libraries.

        
        RFC 9421

        Title:      HTTP Message Signatures 
        Author:     A. Backman, Ed.,
                    J. Richer, Ed.,
                    M. Sporny
        Status:     Standards Track
        Stream:     IETF
        Date:       February 2024
        Mailbox:    richanna@amazon.com,
                    ietf@justin.richer.org,
                    msporny@digitalbazaar.com
        Pages:      95
        Updates/Obsoletes/SeeAlso:   None

        I-D Tag:    draft-ietf-httpbis-message-signatures-19.txt

        URL:        https://www.rfc-editor.org/info/rfc9421

        DOI:        10.17487/RFC9421

This document describes a mechanism for creating, encoding, and
verifying digital signatures or message authentication codes over
components of an HTTP message. This mechanism supports use cases
where the full HTTP message may not be known to the signer and where
the message may be transformed (e.g., by intermediaries) before
reaching the verifier. This document also describes a means for
requesting that a signature be applied to a subsequent HTTP message
in an ongoing HTTP exchange.

This document is a product of the HTTP Working Group of the IETF.

This is now a Proposed Standard.

STANDARDS TRACK: This document specifies an Internet Standards Track
protocol for the Internet community, and requests discussion and suggestions
for improvements.  Please refer to the current edition of the Official
Internet Protocol Standards (https://www.rfc-editor.org/standards) for the 
standardization state and status of this protocol.  Distribution of this 
memo is unlimited.

This announcement is sent to the IETF-Announce and rfc-dist lists.
To subscribe or unsubscribe, see
  https://www.ietf.org/mailman/listinfo/ietf-announce
  https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist

For searching the RFC series, see https://www.rfc-editor.org/search
For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk

Requests for special distribution should be addressed to either the
author of the RFC in question, or to rfc-editor@rfc-editor.org.  Unless
specifically noted otherwise on the RFC itself, all RFCs are for
unlimited distribution.


The RFC Editor Team
Association Management Solutions, LLC