IETF Logo Mail Archive

[Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic

Maxime Guerreiro <maxime.guerreiro@gmail.com> Wed, 19 August 2026 16:04 UTC

Return-Path: <maxime.guerreiro@gmail.com>
X-Original-To: web-bot-auth@mail2.ietf.org
Delivered-To: web-bot-auth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id E06FB12C54EB5 for <web-bot-auth@mail2.ietf.org>; Wed, 19 Aug 2026 09:04:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787155474; bh=qzepFYBzz0HQ50MDn49oKnmJQqW6QE5j7kLKZygKwlw=; h=From:Subject:Date:References:To:In-Reply-To; b=jD1Mx9uen7tb2wShqVhCN9P+pxEMkPL4CJSZi+j7+mtSzVCg+ZG8EHCBAPSIt5F5g MDgyLrHdgqQ2H/cy4ZQ6KRr8ankF4XMjQkSxh8NmPLjqDgFPWu2MZ2/76esAF8Ykp5 OzHbnqSsY6nTlfcanWJzfTfDotcSieJNOTeg5I8c=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LSAqFc9W3MO5 for <web-bot-auth@mail2.ietf.org>; Wed, 19 Aug 2026 09:04:34 -0700 (PDT)
Received: from mail-wm1-x330.google.com (mail-wm1-x330.google.com [IPv6:2a00:1450:4864:20::330]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 6FAE412C54EB0 for <web-bot-auth@ietf.org>; Wed, 19 Aug 2026 09:04:34 -0700 (PDT)
Received: by mail-wm1-x330.google.com with SMTP id 5b1f17b1804b1-496bb7cdf51so14695455e9.2 for <web-bot-auth@ietf.org>; Wed, 19 Aug 2026 09:04:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1787155473; x=1787760273; darn=ietf.org; h=message-id:in-reply-to:to:references:date:subject:mime-version :content-transfer-encoding:content-type:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=n9CqNJD634dIb7asxHf2tfEfUAh/MynUR/3DoO1L+xY=; b=bDK2z9+zA7+cSjFx6L6MDFoJkILE4bbbZrUfoLfWBhE7oKheGJCT/Svtk6kHnAIHih NBdq/YATNlNVzBm5P+/wxaZMMIaXavSrmSZp3jAB5dQBOcdBqNufBysXX7OC0ZXH/5Yf 79pqMFBSfAn4Dao48fYEJUwEP3eHw7rJTL2upA5eRmoKrOXiUQI8lKuiYxX0Tc4t5ovE Aojes5w6JwB8FnG/MnU8WW8pLfkKN9sw40RsyklgIbmDMw5UTmsEdeedhLclGw4iY4mF /RLsilQ+Vf641pr2elLv7M8pBH3jQ8P2voZ2+xMueZfDtW4gjlRFtB/Lbwdl5PhViX7V qI6A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787155473; x=1787760273; h=message-id:in-reply-to:to:references:date:subject:mime-version :content-transfer-encoding:content-type:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=n9CqNJD634dIb7asxHf2tfEfUAh/MynUR/3DoO1L+xY=; b=BJjuxgebMHvLc58/aDY+QtBukoiILGLdqz6I+OPwSP1JrYRXVJIqNnjM9ZMp5SAy0q wYdoRZ5Lt723JMsUS0/bsoGpJnPU6AldDp0AcZqudhyyolcqYvPOFdBftYrbDyyCZuxz K2yYl5B70TkM6L5FYrGsJwjd/VyPqP/yxcqFxA72bWmg8XgM7o3GIG4lZkFiUlA1cQLZ 4STLer5LaUQbJCfik+/pSs5wXytTUkkenoozoox021utikIITcOyhG/WEKskLJdkytwh TXFmP+ktMrlFQmwvWAUiJSAuBrEcNCa5w2AvWdmONArdk/8VtUPqp110wK6vuMpgYTSp aQOQ==
X-Gm-Message-State: AOJu0YyoaA23bd//t568137igrdJcGx9b4ZjupNxwYWh6Nxe9Tcd34oP jylE6HrBqVJc40xqto+VJQhltptycyr6SLq8MdwmRmpyhB13ABzX52oOiaiIIyM8atXcKUo2
X-Gm-Gg: AR+sD10G5BZt9OoRvTcn8xW5voIsvRVLRbm7aL9A/N1F2qOHrnhmpjHdGvALhvjjNP7 8OI1eqniM+SgIoz5jCzs4Y7o6aeblwEoX26hZ+jvbB/sa1L8+k8gtyFSoVHimdSYkRvc2NGisMX BWVQJu6RJ/VlzJCIp1aurLl75CgTzGy2raPV1H9YogfskYEHGtzMCRpPakEP7bRsJDOXYm2yacD qrTjqXUaO+KOU+hkt3NAXxo40clPseOYNaHuYbWAw9e8q0esLOQ1ySJ8ollh4MhISLX6ZAHI9eZ r7Tko129IqC0qIi3D/fkgxRSd80ohfF02hWdwGHaBeL86YQ/d9meijleVJgs64kk9WfCmQM9WTi ScJAj/C+uw60BYHfxrKu+ZucbobcD722Ae+b3v4XFkOtaicYKVupQltT7sjmO4pguovua2GHiZq MiJcGilouSL3PShLoglU2MIhImDc32ERL+YafxpWzwmSgXzs99uX7QBQqwMIZ3MxTEYggacMUKe QLhvyESFgnn5YssPpg5OYY=
X-Received: by 2002:a05:600c:8b6e:b0:493:f140:c3fb with SMTP id 5b1f17b1804b1-499aa1a8bbcmr116713345e9.7.1787155473282; Wed, 19 Aug 2026 09:04:33 -0700 (PDT)
Received: from smtpclient.apple ([2a09:bac6:32f1:2541::3b6:5d]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-499aa0d6721sm91139555e9.11.2026.08.19.09.04.31 for <web-bot-auth@ietf.org> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 19 Aug 2026 09:04:32 -0700 (PDT)
From: Maxime Guerreiro <maxime.guerreiro@gmail.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.700.51.1.1\))
Date: Wed, 19 Aug 2026 18:04:21 +0200
References: <CADNypP-Jfeyut1s_jEOf0=BC-2NbFr9rFDqeohh7baT60+4DrQ@mail.gmail.com>
To: web-bot-auth@ietf.org
In-Reply-To: <CADNypP-Jfeyut1s_jEOf0=BC-2NbFr9rFDqeohh7baT60+4DrQ@mail.gmail.com>
Message-Id: <F94E7D50-9291-47B7-8D27-7D85F5B532DB@gmail.com>
X-Mailer: Apple Mail (2.3864.700.51.1.1)
Message-ID-Hash: TIN72UZOM5H3VYZCQ6MD6XAKLVFRSHLQ
X-Message-ID-Hash: TIN72UZOM5H3VYZCQ6MD6XAKLVFRSHLQ
X-MailFrom: maxime.guerreiro@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-web-bot-auth.ietf.org-0; header-match-web-bot-auth.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic
List-Id: Authentication of non-human users to human-oriented Web sites <web-bot-auth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/web-bot-auth/T4x8NkUiBWNWWZyVlmnBbobK8pM>
List-Archive: <https://mailarchive.ietf.org/arch/browse/web-bot-auth>
List-Help: <mailto:web-bot-auth-request@ietf.org?subject=help>
List-Owner: <mailto:web-bot-auth-owner@ietf.org>
List-Post: <mailto:web-bot-auth@ietf.org>
List-Subscribe: <mailto:web-bot-auth-join@ietf.org>
List-Unsubscribe: <mailto:web-bot-auth-leave@ietf.org>

Hi all,

I support adoption

As an engineer working on bot management & abuse, I see strong value this being standardized - and the current draft is a solid starting point.

Best regards,
Maxime

> On 18. Aug 2026, at 21:58, Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com> wrote:
> 
> All,
> 
> This is an official call for adoption for the HTTP Message Signatures for automated traffic draft:
> https://datatracker.ietf.org/doc/draft-meunier-webbotauth-httpsig-protocol/
> 
> Please, reply on the mailing list, on whether you support or oppose the adoption of this document by Sep 1st.
> Remember that the current version is a starting point for this work.
> 
> Regards,
>  Rifaat & David
> 
>

v2.46.0 | Report a Bug | By Email | System Status