[SCITT] -03 of draft-mih-sokolov-scitt-payload-binding is posted
Steven Mih <steven@actionstate.ai> Mon, 07 September 2026 06:00 UTC
Return-Path: <steven@actionstate.ai>
X-Original-To: scitt@mail2.ietf.org
Delivered-To: scitt@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 38A2C136836F7 for <scitt@mail2.ietf.org>; Sun, 6 Sep 2026 23:00:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788760804; bh=cpaXld87gGpntDRkMZa3HKc9nOFxC4dj08EaXp3qpdw=; h=From:Date:Subject:To:Cc; b=TWVKyRElvr1KMdHa/2LeM69Cvj9LhhOkVcvmKvIl+mD3xYkf+wlH/kOzS858vDLYT R4o+f1FRqDxjDJ5J1HUuh001mvurI6fKGyuEZpjs6uwhkjujbN3hBCw9Z8r/RpSwP7 ZvUuZA0+sNHR7TqKlzGPD4eybG3oEvT4nqCtDuZ0=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=actionstate-ai.20251104.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e0p2E211Jvsm for <scitt@mail2.ietf.org>; Sun, 6 Sep 2026 23:00:03 -0700 (PDT)
Received: from mail-pf1-x42b.google.com (mail-pf1-x42b.google.com [IPv6:2607:f8b0:4864:20::42b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 622E1136836DA for <scitt@ietf.org>; Sun, 6 Sep 2026 23:00:03 -0700 (PDT)
Received: by mail-pf1-x42b.google.com with SMTP id d2e1a72fcca58-85c9a79590aso3027837b3a.1 for <scitt@ietf.org>; Sun, 06 Sep 2026 23:00:03 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1788760802; cv=none; d=google.com; s=arc-20260327; b=GHpo2pDlSYUrmBl9lKDdVUQvD6zz1KopOCEQD44fE6xH1xZL7vUQ5Uwq7kbae9XJEx T6VXGcRM+jVwhqVchdzHtdsFu+78uwo2aRz8wCoIefmd40RoWgF91e7MLyUjfabkt/4n H2tuY03vAW1irqwawLpqOP5Xw4O54uRDV2jakymmc8QAWF+1WTRW/YTl95QUeAAwW508 ebckyBvdVFp0Zieum2uLzT/P5SnA8dENqlYkUMTEtMDbibVGgL0l8d5SYx1vFl7FmISF lMWwiyHBRbGlkE/KPZDZkqPXMwXE4PSGsfNUA5YRLfNJw3So0Ism5L9YGBiUq8JNsXIQ d3YQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:mime-version:dkim-signature; bh=cpaXld87gGpntDRkMZa3HKc9nOFxC4dj08EaXp3qpdw=; fh=DYhsv1fx6hYM7pGlb6BiRYePjUO8Y/v7vHTIGhivtb8=; b=fvSs28m+Lu5YpJ4YwybLi36+biKr6VyF6da1JQBOhlLc9qcLQaiyP1qOUR9+/THXPX O+TtmYvLeK50u805tEgLyCiUOZQygRuES7yPDVrabokTSvPUDOQU+EGUOzZIf30VikHT SrkY12lCr0KKoZkQaACbVHMAhgyspJZy3GztvbKx2A9DgowbsA84y95UFV0CqJT7zA8C kHGSGJZ9F4KxLG69YRYFdT4LbM/otwYcIzkODp4lTRd2UBDx1OpixV0qHfMgHqWNVvR8 H/oK+pi+Xfxkbxn7AOBHwVhgWpVi9CmkCXHQCFDF7EfOy5508TCqy6kLwMkNyNQUKjMz h47g==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=actionstate-ai.20251104.gappssmtp.com; s=20251104; t=1788760802; x=1789365602; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:mime-version:from :to:cc:subject:date:message-id:reply-to:content-type; bh=cpaXld87gGpntDRkMZa3HKc9nOFxC4dj08EaXp3qpdw=; b=hAZeJcYZJg1zl45I86lfeFyJATLtrgmuvdkUQgy+CFqD5V3qmCrmCmOlE4mXwWEwcp iJ/4lY/KXyvulSLoA9M0WlEaJ+CpHyaoPChbFG8T2U8z4sGrcNcZsFrGyLRrx/3HY2Lz /X9PUv2QQ2cZ0xMzAzpV+o06sT+gtzCb8uTea7zHigK+7n7u/nCGHRr+Xy5ocgqRiz0u 3Q9zTWTeIdJnS1O2xxKoOwJxZhc2MC3QtKZtOi9o6EjTG0ettpqeITbr3/ohu0fvrNny ZVDzeaQwTSeagNHyKoTD+xOE24tJxcqvHbgWPkOkB9MP8nT8811NhWl4qTHAhw5nvjGQ FqMg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788760802; x=1789365602; h=content-type:cc:to:subject:message-id:date:from:mime-version :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=cpaXld87gGpntDRkMZa3HKc9nOFxC4dj08EaXp3qpdw=; b=IcbmBT7zkIvTZ7TqEI+yD1do8SZvpeGnjxPSsg4ntw9UMt5irGZOsw70fGxm9MDsRq fq2PPPDhc0ZsVHngfDZg+AwRR1M0c3IcUO6ZGFbOpSXSofAGZ47XT/t3LwOESWK5tkGM YOxLUi60p0hHJ8K309Bl5DkJ9Vfc1tg4r/d/1JxeX3dL2oFCLUXA98YZcLAMg6jwbyOI k3ewXLp62HHtFwTeGsSiVO8I/rmetTtZfcywP5axMwq+GpzwFb0hy61yOXn1Tlz8wdmu vVD3bsansuYfwvIH/0/u5sWsBrJvWcNib3Xowx4EP2b78+Isl90LunSE2UwbDxKjbC/0 p73Q==
X-Gm-Message-State: AFuF++l8u1MMYYcwQGXDd68w9gjF261Zez/GlsdhJ3T4/jqYFTC2cRs1 fqybftP2WfsID+WBjlA3DEahPGJS2/7OiuBQbOjhdVj1LZakap5VGY0bsCaJafUIcpgQ9TFdwuM l1kSS7QHjhptGczp0+PLt1xqkXwg9E5t/YgbWk+Z3WMSBujz7psIAwA==
X-Gm-Gg: AYBFou3/yBJhiVQK9velyLElKCdCKx5bc8rbspXolbMwTHs7CESMP8NWY4ajeB7Q4yh kgW0rj/v3gMRMtrPaYEX1yu0qf6Lll/VnLJAePnaiH+VfIDLDGilKwHTL9ANWM2fgUe9Ljid+mN 0pqaXlUCYAjtsWCI5A7uYUNSNo3mSRJ6NA6hiZy/aJoIvuNl2uJYpGLKyJZLTgxDUgIGcHfY105 cDhDN87kF5A8hSLYRTBDEIR5dCuv4HX+fEYB5z4jaymisz3wzW0W8Z3JhIVm4WUPlZcnk7vuRFz x5Oz+1sjDy85iEU5HVPCD45I66JckaMQTASPobPTSfgv6PYAH1xcB61tjQQbfm6A9OXO
X-Received: by 2002:a05:6a00:2888:b0:851:92fe:504b with SMTP id d2e1a72fcca58-86167e98978mr28259285b3a.7.1788760802204; Sun, 06 Sep 2026 23:00:02 -0700 (PDT)
Received: from 649336022844 named unknown by gmailapi.google.com with HTTPREST; Sun, 6 Sep 2026 23:00:00 -0700
Received: from 649336022844 named unknown by gmailapi.google.com with HTTPREST; Sun, 6 Sep 2026 23:00:00 -0700
Mime-Version: 1.0
X-Mailer: Superhuman Desktop (2026-09-04T19:06:13Z)
X-Superhuman-ID: mtqa5zs2.9886a096-7cdc-4b57-ae5a-8e88bfc3ac5a
X-Superhuman-Draft-ID: draft00df8c3c5cac8858
X-Superhuman-Thread-ID: draft0069a701ea92dcc7
X-Entity-Ref-ID: mtqa5zs2.9886a096-7cdc-4b57-ae5a-8e88bfc3ac5a
From: Steven Mih <steven@actionstate.ai>
Date: Sun, 06 Sep 2026 23:00:00 -0700
X-Gm-Features: AcwNN1ULwg5O1Gu7cJcy5PiDpSfU5cCJHMAuop4bpsguMg-nUx9P2mmUlos3NuM
Message-ID: <CAJsPq9tKzk540O4K6L0U8YCy-7fdfOzVO0TYHRW0xZVowfiiJQ@mail.gmail.com>
To: scitt <scitt@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000342c92065ade5497"
Message-ID-Hash: 3LWP6BBRN32ULUPJG64NZF64RPZNHK4W
X-Message-ID-Hash: 3LWP6BBRN32ULUPJG64NZF64RPZNHK4W
X-MailFrom: steven@actionstate.ai
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-scitt.ietf.org-0; header-match-scitt.ietf.org-1; header-match-scitt.ietf.org-2; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Anton Sokolov <anton.sokolov@tyche.institute>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [SCITT] -03 of draft-mih-sokolov-scitt-payload-binding is posted
List-Id: "Supply Chain Integrity, Transparency, and Trust" <scitt.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/scitt/FhRNRbJNiNC0c9PYFME3sSxiCzk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scitt>
List-Help: <mailto:scitt-request@ietf.org?subject=help>
List-Owner: <mailto:scitt-owner@ietf.org>
List-Post: <mailto:scitt@ietf.org>
List-Subscribe: <mailto:scitt-join@ietf.org>
List-Unsubscribe: <mailto:scitt-leave@ietf.org>
-03 here: https://datatracker.ietf.org/doc/draft-mih-sokolov-scitt-payload-binding/ One change per review feedback on in-charter or not: -02 section 8 defined a payload data format (non-goal 4). -03 moves the typed reference to the envelope as a COSE protected header parameter and leaves the verification algorithm unchanged. Nothing else. Specific request: a co-chair read on whether -03 is now in charter, and an ack from those who gave the -02 feedback that the change addresses it so we know whether it would be appropriate to ask for a call for adoption. Design discussion on the header-parameter shape on gh: https://github.com/action-state-group/scitt-payload-binding Steven Mih & Anton Sokolov