IETF Logo Mail Archive

[Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic

Dmitry Izumskiy <idimaster@gmail.com> Thu, 20 August 2026 02:55 UTC

Return-Path: <idimaster@gmail.com>
X-Original-To: web-bot-auth@mail2.ietf.org
Delivered-To: web-bot-auth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 26B4412C9D064 for <web-bot-auth@mail2.ietf.org>; Wed, 19 Aug 2026 19:55:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787194503; bh=MsXwO4wu7gbt8ArY79f1WlQKNyBoWIl28+6DyekqzVE=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=R2oc2hOX69d974Le7S6MZH0jAxJ1wemkUOzesDfZj/qICjb99Ambi822molvJRtjI EWw8R2+VrzKN1xsFgBF4nW63Lh+U2yvSRu05osI1h3929Ionj8+nrgrzt/b5XdK+Xq gmhmV2c7w4IcGd8zPFuPOMqBqZNHyPVLS+f+Hqds=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OY6WVOpkTRyH for <web-bot-auth@mail2.ietf.org>; Wed, 19 Aug 2026 19:55:02 -0700 (PDT)
Received: from mail-lf1-x132.google.com (mail-lf1-x132.google.com [IPv6:2a00:1450:4864:20::132]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id B57A412C9D05D for <web-bot-auth@ietf.org>; Wed, 19 Aug 2026 19:55:02 -0700 (PDT)
Received: by mail-lf1-x132.google.com with SMTP id 2adb3069b0e04-5aeb59d54b1so1970628e87.1 for <web-bot-auth@ietf.org>; Wed, 19 Aug 2026 19:55:02 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1787194496; cv=none; d=google.com; s=arc-20260327; b=k+oKTwp3IhCfe2qq9WpmHr497fjy2Sy32pAqF+L+NjQXwyywlG51gaW6DQjNHlQV52 lsvF1DNRa29LZ0OAWbyW/w8TLdL9fB2JxWjzEpyDGnrJ9B2ffnnxDu4ZmWXnLuqjpIyx ezn5VJuEJQNaexkh8trECebLiST2PAOXfmeMhBLUllPy4/Z54oulz2vK2oCI6eCIrujz zyj8FJWbUAoT3ly21ID7u+fv4wjvA5M5mC/x5/Eg8ETjXvxMP6oOW9RlDuCKFYpbP1+R MpUKHBGyC40E2buWDtWZe6+1apppYA9KsGJT/I8ORv+zetZaIAAVIwGiiAHTDTPrSUyC PulQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=YXev13n7GHia0jVDVqSHNFzKuvOznd33rj2O5k72qaU=; fh=jgEIgtVV8RT4UTGUe33Ls7Lln1hhADEsEW8waJvY8L4=; b=NQJkB+HpDHQ9XNzN4Xs/2a75Q9+d+mXQmbUGxG9ZrVjLBuWAw15EHdt7Xm0uQKE7R/ CftWRaxLPIG90fmdr+QdsoSNX4NYOUq2/KVYt3VHkR0lg1srScnjKsBSh2M7Y5HocIY/ ydK5e092v7Osvjo0pIRKAJEAjTq3EYK9JOt5YbgTtLqB8pwj5m+HfoAcYorvlr0JSwsH wq/q/s2Zu0VTBom11/f1L/MSo6uMxQf8S/j0N/c39yEbkDH/YaWcIq7CnNjQmLGWULku m9fXk/d+8ecPbE9Q0bJI61uK6/T1enPYrxZFWkIMTTWkigUs3t1fGXKWfCO/SF11S8lh VRfw==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1787194496; x=1787799296; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=YXev13n7GHia0jVDVqSHNFzKuvOznd33rj2O5k72qaU=; b=jSTvffiJuUt0m5kBSM+AzK6QveCvSwic1415lt4vAgCnp0vBjI3CHgcmWRoXbAbX1z koF0Q2HTh20bLhVAmO8iV99b44iglZBaWIBYCz8gjbDedQ9Mtl+eMDfqqOvw/zFbFX/M PO3/Zri4dC2jvXJUrFWLOVrF/PZHdAtLWbb0f6+4ybnlxX2mZ/oRQIf7zj7itLHVx86X UKzQi/bbxHPL/G08hSpMMaSptxq+y1MaHHnV6Wwra1WYAgawvayP0CSkaFAy8Fg/skrj g3dTqD41swx2sllTpXtBQRNLuMDSzS1N0G/opjBJRf7WGmdbl9CCsb5Pek/KHrMCgytV IO8Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787194496; x=1787799296; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=YXev13n7GHia0jVDVqSHNFzKuvOznd33rj2O5k72qaU=; b=qHgIiE2Fr8Rk2lMdzc0Rppp78mli+g1ZQn6o+MsRKFjcRMsb1Z9b3yNYAp6G673csM y7JzYY8UD/foApoaT52thv95+dfeWd/G2fDfyPLiWb+s0tq79Zk+en2jW9to8dgqi6de 3u3LH3fyA5IPKQwcNKKRRMgD463ZzV/sgdmdD4CVkjGHQGewuwy74NR91TVRj9y2Ibf5 jOxRzKkHpje4uvWnw/ba/TJEl1Gh4RWzt0EwThCQQFrsu1BgCNBa+bHlcaMrUKA+J9vo UpTUDgfnoRRfNOI/+QsV6EaUHKDhhLy29AjKLTq4svWRLvK0o4t7W2pjqB6saLvYRuxp oHbA==
X-Gm-Message-State: AOJu0YydeSelY1UUVu6VmiZkUe0cI01MUXgkLPd/PgVlSHwpAboOxsI7 gwvnqKaY5RMH5zgYVn8vnrWGIajuM6sy3e4efzIHGQEadQvMSqO5T07HdJdJ4jkFLcjJa2emR0g gPDUUI6Rn8iHqMwK82OM+HYKJCX5kA08=
X-Gm-Gg: AR+sD13kttMCHxp7fDJnT5Vbb9vOmpi3Qn/8OvAB8GPJWIiUNwDn9A5l3TtSOlaUvqI H9iQKtP0JLcLI3G71fnnI/1DbhZoVmia1YPB7oPqaYvesSqV82zC2cH3MIsMkSFIym9AVSCxVeG DMr1dE9Mq+lOyyIlbvuj21LiyHNbxJKXhWF8GhnYrIrHYvKbhOBwAyognP/QB42STRCOdFbZXlT CxSeG7j96ekkGQp6lvHyLT+hXrwHoMo+aWBWSygiYfstaA4qdGBMAoyXCM3AjAYYUjpvnHcBUL+ tXMc6kJMPfVENVco2NYLBPeQ9Hy8rzXfj4VKNNTdxb2KJOOc7aqxleW0UIyZuquIcfFYouSuKMY =
X-Received: by 2002:a05:6512:68a:b0:5b0:12e1:486c with SMTP id 2adb3069b0e04-5b478cf9744mr2664176e87.24.1787194496140; Wed, 19 Aug 2026 19:54:56 -0700 (PDT)
MIME-Version: 1.0
References: <CADNypP-Jfeyut1s_jEOf0=BC-2NbFr9rFDqeohh7baT60+4DrQ@mail.gmail.com> <CAMzqgoy_1+oEYCJP7koTa-FJZE0BZv16O_JkgjCuzQdv4ZbUDg@mail.gmail.com> <CAOgpWZkzrVRYSrOahttTNydR3XrttiRKZr7+NGeUj3VWc0vZtw@mail.gmail.com> <CABd3A8103gnOw=_pkWWmYrWrDcXYDYoy3h-RAvv_voRph0edKA@mail.gmail.com>
In-Reply-To: <CABd3A8103gnOw=_pkWWmYrWrDcXYDYoy3h-RAvv_voRph0edKA@mail.gmail.com>
From: Dmitry Izumskiy <idimaster@gmail.com>
Date: Wed, 19 Aug 2026 19:54:43 -0700
X-Gm-Features: AcwNN1UuIUZnQA_wZStMmdQScaPUBFTHncc2edrXXI1wPTNC6m4DPJ0xGqnki5k
Message-ID: <CAOuZNLJiuy-5GDzkS7SpJnU8TWr+XaiiPx541Z33ZG7vFCguaw@mail.gmail.com>
To: Ilya Grigorik <ilya.grigorik=40shopify.com@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="000000000000164c54065971a533"
Message-ID-Hash: TU3I3RIKV4OAOREOSO5DIKWQUH7VMP6F
X-Message-ID-Hash: TU3I3RIKV4OAOREOSO5DIKWQUH7VMP6F
X-MailFrom: idimaster@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-web-bot-auth.ietf.org-0; header-match-web-bot-auth.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: web-bot-auth@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic
List-Id: Authentication of non-human users to human-oriented Web sites <web-bot-auth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/web-bot-auth/HJnSqjx3j0kXQTcv5j2jVp9EGfw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/web-bot-auth>
List-Help: <mailto:web-bot-auth-request@ietf.org?subject=help>
List-Owner: <mailto:web-bot-auth-owner@ietf.org>
List-Post: <mailto:web-bot-auth@ietf.org>
List-Subscribe: <mailto:web-bot-auth-join@ietf.org>
List-Unsubscribe: <mailto:web-bot-auth-leave@ietf.org>

Hi all,

I support adoption of this document.

Best,
Dmitry


On Wed, Aug 19, 2026 at 3:03 PM Ilya Grigorik <ilya.grigorik=
40shopify.com@dmarc.ietf.org> wrote:

> I support adoption.
>
> We have implemented and use WBA for bot auth at Shopify in production, and
> we landed WBA interop for UCP
> <https://github.com/Universal-Commerce-Protocol/ucp/pull/483>.
>
> On Wed, Aug 19, 2026 at 1:21 PM Rim Vilgalys <interweb=
> 40google.com@dmarc.ietf.org> wrote:
>
>> I also support adoption.
>>
>> Also a big thanks to Thibalt & Sandor for all the work that went into
>> this!
>>
>> On Wed, Aug 19, 2026 at 4:19 PM Orie <orie@or13.io> wrote:
>>
>>> I support adoption.
>>>
>>> On Tue, Aug 18, 2026 at 2:58 PM Rifaat Shekh-Yusef <
>>> rifaat.s.ietf@gmail.com> wrote:
>>>
>>>> All,
>>>>
>>>> This is an official call for adoption for the *HTTP Message Signatures
>>>> for automated traffic* draft:
>>>>
>>>> https://datatracker.ietf.org/doc/draft-meunier-webbotauth-httpsig-protocol/
>>>>
>>>> Please, reply on the mailing list, on whether you support or oppose the
>>>> adoption of this document by *Sep 1st.*
>>>> Remember that the current version is a starting point for this work.
>>>>
>>>> Regards,
>>>>  Rifaat & David
>>>>
>>>>
>>>> _______________________________________________
>>>> Web-bot-auth mailing list -- web-bot-auth@ietf.org
>>>> To unsubscribe send an email to web-bot-auth-leave@ietf.org
>>>>
>>> _______________________________________________
>>> Web-bot-auth mailing list -- web-bot-auth@ietf.org
>>> To unsubscribe send an email to web-bot-auth-leave@ietf.org
>>>
>> _______________________________________________
>> Web-bot-auth mailing list -- web-bot-auth@ietf.org
>> To unsubscribe send an email to web-bot-auth-leave@ietf.org
>>
> _______________________________________________
> Web-bot-auth mailing list -- web-bot-auth@ietf.org
> To unsubscribe send an email to web-bot-auth-leave@ietf.org
>

v2.46.0 | Report a Bug | By Email | System Status