IETF Logo Mail Archive

[Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic

Gary Illyes <garyillyes@google.com> Tue, 18 August 2026 20:58 UTC

Return-Path: <illyes@google.com>
X-Original-To: web-bot-auth@mail2.ietf.org
Delivered-To: web-bot-auth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 9637112BEA7B8 for <web-bot-auth@mail2.ietf.org>; Tue, 18 Aug 2026 13:58:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787086684; bh=IepT9+J99mA1hubo8c7Tcyfx4ZfykUJomJOoeBixniI=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=xCXhRyViZ8U1GfGeMPa6tU7nIUL4OdKksh0iEvgSx0ZyG2dIk3MfxhKDMR7MtvRic ySRcsfq5mel4ob0KVCHFJp4J/cJtb+UskBlhY7L7XOu33MpWrN7mD8fgeirgb0i3dr AaFFbM/goeTUsh9JPZ3WlzlZsjnrrPJVYXJd+L+g=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -17.1
X-Spam-Level:
X-Spam-Status: No, score=-17.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jbwq70OCnIOA for <web-bot-auth@mail2.ietf.org>; Tue, 18 Aug 2026 13:58:03 -0700 (PDT)
Received: from mail-qt1-x82e.google.com (mail-qt1-x82e.google.com [IPv6:2607:f8b0:4864:20::82e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 64A3E12BEA7A4 for <web-bot-auth@ietf.org>; Tue, 18 Aug 2026 13:58:03 -0700 (PDT)
Received: by mail-qt1-x82e.google.com with SMTP id d75a77b69052e-51c10ed63c0so27841cf.1 for <web-bot-auth@ietf.org>; Tue, 18 Aug 2026 13:58:03 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1787086677; cv=none; d=google.com; s=arc-20260327; b=c5gF99Paw9g/0KzqvCMEt5s+U056xoXVKE7hkXarGGGBLeigfNCubeKUq7w2zBLfUU TG2TIsKcd+EjeqBIcfeq41pFOcTyilETGkaJD+BuBi2Io4O13cJbNvHEyQQINVsKa2No XJt8LAefR2nkftLygCRiZollPHSAKs1rkRhS/J9JVlu35UiHuMsvfyRrWwFI7pDxBuL8 uK3E5slV9hef424BmTMa97BuGhoyHNvBXRQIlbVtSKmvwbuy3/VTyDabDtmkGsmTPmI4 o56v8Hn383U8rT0avOkYJ9VWZZWmeGFtGHe6NQZP7Q1w/D63q97wbt1fpi+ZK5JnNYiD +Mng==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=2MbDqvcLxc1DGwcuegbotDYBnsKk+xqS7S4Cm7sdy7A=; fh=G+diMy52bB4nkUv5r3tZmzs7ukN7to3GcaJ1bqAsPec=; b=PQvLOy8NltC+C1LUxWsGvHf2JWv+4UZrM2yPxyYk2+re8VseT3EX1XUSlkFfetP2O7 3RV7laEl6C/N+decYCIEQmzEx3v8Ar2DRQuCAuhegMkue556+fITFojb7EOBNTv05PKv YvNNwsSQRNDGXPmNniHCtwCKxJJFbsTN6Y39F8Ls2SJZTh0Sx/xd6RNRe9V6Nx/uRWzr 8KZojsWsAV3ei/iyDgW2MO8SxB8ChlaCxW4DK2RTGkwblnwa+AsvLCgLuCxFbMnY1FbF /w+9J2BTeXnZglc+Eo9ALhnAD/VwpLvI5av3YkfCCpwESc3QzXRi2dZxXy94PYNb0q8d D21g==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20251104; t=1787086677; x=1787691477; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=2MbDqvcLxc1DGwcuegbotDYBnsKk+xqS7S4Cm7sdy7A=; b=dZGuwXprCxCoE7gIkMheByL2SUVa+2JeZBeffwUAzu+Y0W43s2q3frjIcU4tlkjoTl HYjKzdDNriacGlEOs8NGIDNJafcr8yn33i436FBbaIMk5Eo8Pia9lGKGERA1FHqVKrT8 1DRGEGlSq2cCJCtodMVNIw8QqAWB/EidZtU/JHAZnsqokeFyLXnS/bMAh7GjxOC3uMtc XRQXsNE+YwIusuH3dyAJ1+lOMsd0eoHis+Mv6x7/rZgMZuMFASjAHAIM5AIObf3sub6d TYvNnwCSuc8klUBCvbFK4BtYP72n4az0hb3YQrFTyXMdx2CctFTfSisPGVUC5NwnTsnH bbKg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787086677; x=1787691477; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=2MbDqvcLxc1DGwcuegbotDYBnsKk+xqS7S4Cm7sdy7A=; b=cVuPK80d4dN80tIUBJ5oTXOs2GVKpjlR87Mih4NSTEZfiiTbdNZftAqvGomNgyLJUY DAlCeaX6yUI2NxOyzZH6pBb+rVJ33uZ8PewRJ5WAzyK7oA8u6rCx2wigBPpvnerO/uE+ KWxhX5j9mHlhPTaTYPNvZgU9mwoAm/bYPNns8B6CE8kYd0XT5epJaUTDDq8CjGvhSb/G zz6LCco8qcMrQDE6LFZ/nwUxvybeveE1a1SERPPPBaxfKfN4TJ0P5wVJ2ZI5OMbJHpCj x5RrnjM1WaLG/FE8MywAdNo3loTtqmGbGay4/+mL3mS0PcheRxZOguk8wn87lCmWjXN3 O+hA==
X-Gm-Message-State: AOJu0YwL6TJAlKKqtFdq9WrKdhmnkBF1A0F/NfbN3AXhLcPRD2GSvrzd JhLy1zrdAKIm0jaMYY1KsV3SKHGRF57qzahlKv2C4onXbwPSRG+BKCcSd28VCm7urG7OAyNNtQO 9F6iVycWAtnhl/NT2Kqjx0Eeuj6g94MLkfBiPWLjqijZyUFmfoSdUg5Yq
X-Gm-Gg: AR+sD13GNGINs4D5/DbMI/de7iWbZj+PVwidfSSl+O9zKGtmY5vKr92wzsrS9/u8eLK jW6Qr/KMlo9BNpv02Bk7qgCc49tSNDouzYCdroSueP+3p7GgjPkcwNAJJXAsMjiNfKd0Hlk5/HJ Xe0++v1SIqUtkt9NcZnd2oSgfoMgk5wJvYPwh/dbnw166zPgV7s8g7SAn10rUI8cIeOlJ6dvdm/ J1DCgdNo3cgQlrXna8DOnfuNJEF/0HtVbj3Slsl0iLdhsV63vBw8h3VURqVnUEKuqVQ0n05Mnsj sXY30jVfGbpptJ551Y+fqrzYvvlTbk8Wwmlpg9VegKRdS5U9xhUzvnMLbVzQzfCYyr9h4Y8zdNX AyjCzMnzTNJDs0YMcldIizVhX9i54QI0URYhbcBM=
X-Received: by 2002:a05:622a:1f19:b0:50f:b69a:f4a8 with SMTP id d75a77b69052e-52dd3c66289mr1743241cf.7.1787086676773; Tue, 18 Aug 2026 13:57:56 -0700 (PDT)
MIME-Version: 1.0
References: <CADNypP-Jfeyut1s_jEOf0=BC-2NbFr9rFDqeohh7baT60+4DrQ@mail.gmail.com>
In-Reply-To: <CADNypP-Jfeyut1s_jEOf0=BC-2NbFr9rFDqeohh7baT60+4DrQ@mail.gmail.com>
From: Gary Illyes <garyillyes@google.com>
Date: Tue, 18 Aug 2026 22:57:44 +0200
X-Gm-Features: AcwNN1VDgSzEsQGKYHtJVCu5fcAU1iJstZeNNz9YfyhSqEqe3xdBVV007Kwq4Us
Message-ID: <CADTQi=dH5X6=-e_42_q3VJeZCBUphgkVLNPZ_O+rdtOK9CW31Q@mail.gmail.com>
To: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Content-Type: multipart/alternative; boundary="0000000000008ec1a60659588a94"
Message-ID-Hash: K3AZ5B3JJ4UXMHJCO775WNCQIO4PWNRC
X-Message-ID-Hash: K3AZ5B3JJ4UXMHJCO775WNCQIO4PWNRC
X-MailFrom: illyes@google.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-web-bot-auth.ietf.org-0; header-match-web-bot-auth.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: web-bot-auth@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic
List-Id: Authentication of non-human users to human-oriented Web sites <web-bot-auth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/web-bot-auth/3vde8ovcKUhVgh5itim8_5KpkcU>
List-Archive: <https://mailarchive.ietf.org/arch/browse/web-bot-auth>
List-Help: <mailto:web-bot-auth-request@ietf.org?subject=help>
List-Owner: <mailto:web-bot-auth-owner@ietf.org>
List-Post: <mailto:web-bot-auth@ietf.org>
List-Subscribe: <mailto:web-bot-auth-join@ietf.org>
List-Unsubscribe: <mailto:web-bot-auth-leave@ietf.org>

This is the most comprehensive, well-thought-out and robust solution I've
seen for solving bot auth. Strongly support adoption by the wg

On Tue, 18 Aug 2026 at 21:58, Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
wrote:

> All,
>
> This is an official call for adoption for the *HTTP Message Signatures
> for automated traffic* draft:
> https://datatracker.ietf.org/doc/draft-meunier-webbotauth-httpsig-protocol/
>
> Please, reply on the mailing list, on whether you support or oppose the
> adoption of this document by *Sep 1st.*
> Remember that the current version is a starting point for this work.
>
> Regards,
>  Rifaat & David
>
>
> _______________________________________________
> Web-bot-auth mailing list -- web-bot-auth@ietf.org
> To unsubscribe send an email to web-bot-auth-leave@ietf.org
>

v2.46.0 | Report a Bug | By Email | System Status