[Web-bot-auth] WIMSE Identity Practices doc
Justin Richer <jricher@mit.edu> Wed, 22 July 2026 10:22 UTC
Return-Path: <jricher@mit.edu>
X-Original-To: web-bot-auth@mail2.ietf.org
Delivered-To: web-bot-auth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D29AC11C207A2 for <web-bot-auth@mail2.ietf.org>; Wed, 22 Jul 2026 03:22:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784715746; bh=gCB6r5nUdNYNtK64rMXdKc8gzyZhTVbU+LpBa6GfH+A=; h=From:To:Subject:Date; b=winrq6ZnIZoe/pUePQU1Z9NiqAVmxiTjwBWl8uUkEHpOksCu5HzgqYy3A8nBayZ2s bVAZm+ia0Zn8U7R+3JvXYQ7D63hOvkWINnKDMwOFbnUDHuskyBLhgYUYHvmsoG0gXI cx4tkYU/B0nGZVDHvhPvSIAg1kiuDqgr8WzwsKlQ=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jE5zGiM1WyyT for <web-bot-auth@mail2.ietf.org>; Wed, 22 Jul 2026 03:22:26 -0700 (PDT)
Received: from BL2PR02CU003.outbound.protection.outlook.com (mail-eastusazon11021099.outbound.protection.outlook.com [52.101.52.99]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 7655511C20615 for <web-bot-auth@ietf.org>; Wed, 22 Jul 2026 03:22:22 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=U+kvpnNh4KO8hvevg8dOP2PvKnj3IP7OXuRMTiySZW8UDC+sqpUsWT4QpQ8Q71GPjJxeTMdtnxuFcK8LiHsBzLABYeQcMbVbyoAiActl6RONLE+tdi4Er6SewyeJ0GBOnYhtnb0pIMR7V/t+mHIOVX1xbyEvgF/Cut+5OstbS2i9iL2YlNTwAOW554zgOX5fhP2CM3y9shTohJ7Aj2XL0ZGN9Z+oRNQFl2cpCVxaUEfp1mTCP+FDx6ZAFmRA5ODFd43Rd8IZD5mo3wHjVZlI0NCgT3x0LXT1OitSyaGI45jrsIF+a5+94s+GVe1n5NHhPPk67+czTx0WLv79WQH2qg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=BDYXNvfFNMxNt3ReMjCdQIISyrNKuQCc7+OGHCA3Bxk=; b=t9CvXKKRnyPSAmkp2cb4f8SeOvb+BozIJWkhi+K1Hdecndz3c9XAesitQHrgFFdR9OI9pKV1jXGEsWsy7Eyt18mYv0WszHP6XKcgf0MPzBSJAOouxwP5msuxCKUGf0VY565C0bhEAGLGjjpU3sO23/8GHQ72dDapWjzh6XGwcAwIN/wBPMB0WOpIyfNXkwopvI5PvJ3KxiA3CsVTUxSFpypdDe2PV5GPc3stkPPD53FkQJTy58c1LhsDARHI5tQPDjIX065AcUZowPnox591Byox1/dEHhS/TLSlBl33Mg09TRZH15V2Mm0dPMgeZrEWajF8Fu8DKH5/IGHV1iKdPg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=mit.edu; dmarc=pass action=none header.from=mit.edu; dkim=pass header.d=mit.edu; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BDYXNvfFNMxNt3ReMjCdQIISyrNKuQCc7+OGHCA3Bxk=; b=GYuRSaFzhx5ir73syb21yTLuq913qylBy0JLC0TSZQzBlddU1aMimr+1d1od2HyOupeQ5BbPhriwUz7LjqwAP6YSOJxa4X6UgH3dWK72nzZr0S1PJkxidG6A8wfspqHtF/UVEnMFWwd6O7rA6YVB1hieF4f+14ZoWOYlKrT9LY0=
Received: from IA0PR01MB8277.prod.exchangelabs.com (2603:10b6:208:48e::13) by DSVPR01MB149109.prod.exchangelabs.com (2603:10b6:8:37f::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Wed, 22 Jul 2026 10:22:15 +0000
Received: from IA0PR01MB8277.prod.exchangelabs.com ([fe80::7f95:e055:a3eb:82d0]) by IA0PR01MB8277.prod.exchangelabs.com ([fe80::7f95:e055:a3eb:82d0%6]) with mapi id 15.21.0245.009; Wed, 22 Jul 2026 10:22:15 +0000
From: Justin Richer <jricher@mit.edu>
To: "web-bot-auth@ietf.org" <web-bot-auth@ietf.org>
Thread-Topic: WIMSE Identity Practices doc
Thread-Index: AQHdGcOKrn5CSTHYA0mddL9s1Mja3Q==
Date: Wed, 22 Jul 2026 10:22:14 +0000
Message-ID: <IA0PR01MB827731A10AF8891D618A5502BDC12@IA0PR01MB8277.prod.exchangelabs.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=mit.edu;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: IA0PR01MB8277:EE_|DSVPR01MB149109:EE_
x-ms-office365-filtering-correlation-id: aacdeafc-cbd4-43e7-84aa-08dee7db19c4
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|23010399003|10070799003|786006|1800799024|366016|13003099007|38070700021|56012099006|11063799006|10067099003|8096899003|18002099003|3023799007;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:IA0PR01MB8277.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(23010399003)(10070799003)(786006)(1800799024)(366016)(13003099007)(38070700021)(56012099006)(11063799006)(10067099003)(8096899003)(18002099003)(3023799007);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_IA0PR01MB827731A10AF8891D618A5502BDC12IA0PR01MB8277prod_"
MIME-Version: 1.0
X-OriginatorOrg: mit.edu
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: IA0PR01MB8277.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-Network-Message-Id: aacdeafc-cbd4-43e7-84aa-08dee7db19c4
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jul 2026 10:22:14.9279 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: RmiY56kmB7SAENupzS1DrPXQ5x7cNZOYkxRp27xa4MtNFKaP3fcT7SDnWFtBcA2I
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DSVPR01MB149109
Message-ID-Hash: G4K56MUX6EGD4WP5RUGHHOQT65QXT7IL
X-Message-ID-Hash: G4K56MUX6EGD4WP5RUGHHOQT65QXT7IL
X-MailFrom: jricher@mit.edu
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Web-bot-auth] WIMSE Identity Practices doc
List-Id: Authentication of non-human users to human-oriented Web sites <web-bot-auth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/web-bot-auth/Axq4bm4muh4Zw2cPHsCfpvB2phQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/web-bot-auth>
List-Help: <mailto:web-bot-auth-request@ietf.org?subject=help>
List-Owner: <mailto:web-bot-auth-owner@ietf.org>
List-Post: <mailto:web-bot-auth@ietf.org>
List-Subscribe: <mailto:web-bot-auth-join@ietf.org>
List-Unsubscribe: <mailto:web-bot-auth-leave@ietf.org>
As I mentioned in the meeting today, WIMSE's got a document that's out of WGLC: https://datatracker.ietf.org/doc/draft-ietf-wimse-workload-identity-practices/ This document: * Describes current practices * Describes sharp edges around these practices * Defines no new protocols or solutions * Does not try to fix or update any solutions We are publishing this as an Information draft, and explicitly not a BCP. -- Justin
- [Web-bot-auth] WIMSE Identity Practices doc Justin Richer