IETF Logo Mail Archive

[Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic

Ilya Grigorik <ilya.grigorik@shopify.com> Wed, 19 August 2026 22:03 UTC

Return-Path: <ilya.grigorik@shopify.com>
X-Original-To: web-bot-auth@mail2.ietf.org
Delivered-To: web-bot-auth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 6233312C7F4EE for <web-bot-auth@mail2.ietf.org>; Wed, 19 Aug 2026 15:03:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787177023; bh=969J4xRSB/J2Xaw+GEEio2EDJkcrQk8U/UyzPjCKMVI=; h=References:In-Reply-To:From:Date:Subject:To; b=tqup0Ea0kHJNAE4eXsQj/47kBsI0ftUf4qoW1GNmw653IJmTljMC2GRtTky8khNCx KKLHXpn7+f91gso1xH+ovfrdIKe95tMlJC9+d92umtZA7aj6oSMrBdbCNp+Ydl2gna UvB2Tq24B8tB6n0tamZne5BHZrAs1XfnBDr8sFJM=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=shopify.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 83bM1zeo4ziy for <web-bot-auth@mail2.ietf.org>; Wed, 19 Aug 2026 15:03:42 -0700 (PDT)
Received: from mail-pg1-x530.google.com (mail-pg1-x530.google.com [IPv6:2607:f8b0:4864:20::530]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id BF96512C7F4E4 for <web-bot-auth@ietf.org>; Wed, 19 Aug 2026 15:03:42 -0700 (PDT)
Received: by mail-pg1-x530.google.com with SMTP id 41be03b00d2f7-cbeea240819so778693a12.1 for <web-bot-auth@ietf.org>; Wed, 19 Aug 2026 15:03:42 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1787177022; cv=none; d=google.com; s=arc-20260327; b=VJ7eFgvYpQY6ORFdCXbK4ZT9vVujIEfulADtL6PL8v1vr0LcPZMNhF+hstvyHnyMtH vYnFKovvGaKm6uzdQX9mJGIrjl8l9oR5k9kiHjESGQuzTLwTmoo4YBEZorb0JUb8Um3L ar+dBWt04odpEicpK4xNgFe5LhJHtlHaC7I/sz6k04TVIlf0mbE8iCnRK2tmHXqUocoP yjUiFZqTPIEj3P7m97gLVufvw9lvBFU3dwEgcQhaGX+mfj+1YFEgQpYxp6VBH7pCVyLC 6jB8AIlm87w58AK4EcE6s6VAZheV4pXj8AUW+aISeaTlT1j967Au7EbAi7mZD0r+c9T2 kmIw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :dkim-signature; bh=/Lw8hSQ22vSteqNsTKTQFDJXFltN0JTgQt18glcJm84=; fh=xAfnAr/+ShY+4ms6rzvPN+QKPYv7dVWR519swS2eF80=; b=Oa+0AKauJGP3ytdcuERlH0Ffk3yoDvBH7VHIyxYizWygiJtB8h+u4IJ2fOOs7l90Df TtagBsxdoyJLDjIGGa6u5t0W3lwLGPBfGorBEEleHRpoyokuj0gYPQF8oApA0cGHnOXN uUYBRM0/Oln8J+HecM08s9fv/hVdVuTgoP4sADA8CNgd+iGlS/XFRn0fjMMXVn4v5wr4 pXn6pSrnCB1K/r8Js2kdphxy5sGuOoxudStIwL9BmCG8D8Ed+Sx0UAiuAHXw3xJrlKiF t2NhCKcRzdLRTAGvl3py4cNZz9L8PfdgyDrcsdohcxJdQCWpBq7Nnhm6oSPZlCznPsDZ nDCQ==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=shopify.com; s=google; t=1787177022; x=1787781822; darn=ietf.org; h=content-type:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=/Lw8hSQ22vSteqNsTKTQFDJXFltN0JTgQt18glcJm84=; b=O21uE7NbGUSLFes+zM4/j7wIyXamEQwvPSckKqjI7cPe40o0WX3dIsU7HVtALGeeQU qgdASrIAZZvzJFkKH7c4q8QT37NaBsvMamCF49zhaOyzATQ3x2EeJGmyAp4eSugPmoeV C8oA98Li3QFxlPAgjB+CUlVraDgQALdLGWy6Q=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787177022; x=1787781822; h=content-type:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=/Lw8hSQ22vSteqNsTKTQFDJXFltN0JTgQt18glcJm84=; b=Rrlf9du9Es9WFf9i0h1bcY2KJ2ygpXHbYSL8obY2CW6KPjLeYVbJkpLIPoUZ/ROlaE sPPOFL5Se3GdSVNVoIhqfDlqxm78Meui62h8tanrQZPRILg59yht9QWkz57qGJW+LNyc zWXVT/RAtbMAEwZ6Jn5Pyk3YI/huzvn0Lt7lDxQAdrzjO/ddVFGsefmT758i3vHlDQUX X7NMf+JBkX9VV1u9RnqGk2WRNxViiTWU6i4Z4/DUrjgnkVcZxHUisfm5Z2+WmpypCFSD 9K0tqVpkitPNgIEKWOoAvuYchQLQT+GTfWCsROtWBq+mMJ8KPFc+7mmnd51I1F+QSj1p 7AXA==
X-Gm-Message-State: AOJu0YxPs9vgIB1owJv50huioPM40H5gxrYL1LwFkb5gcxIOQca27LoW CVmIMFgR0ZxwHDj5f294/YR8W7dj4B0WKZPNzcWW0UZJ65i5xumjJCn5U2VPPP8w5bgXoJERWl0 qXzU5tS5jBvjFX0qvogAddujYn889nxWa1SG5bTJlxUrK/vukcW79
X-Gm-Gg: AR+sD120+LP88FMzgBtjk3JYg/My2h0M5y0Ms1aFrDgnigVS4Sx5dHiST+m7KyJ6CMN fiUYXhGJe0ZAvD8wFXS6GeDKbSdqCXIcFZLKHXRsq21HzHEicfMtbTjEEDPqOJSrNoQ7n33FrJT RqQGPbp8zDygKwpR2kQkxKdqho/CLjx89eKBHUiWs7dyE0ZpMnmNeUsVtA6bke2rrhUomdXHyPT UFybSMLE8W9cZIhF3tOlNGGOq5liM5wDlMrOVekcqM3zYXtTIGtEurQTR6PNYXuyABOjCtChNtC HcgXxuhssiGg637+TdNbyWJvCbKiJqNlIG2D7RQL1XjyPr+TqA4yPUamPlH7Ue7wFW9d03q1G0c BYqmU5heHFbKbXa/wq9OzQVYxsjuDeE5JvYGIABheqp/HrdNWuhvYUT8C3wlIuWO0QsDbwwe8n7 qy5w==
X-Received: by 2002:a05:6a20:3ca2:b0:3c3:875d:7053 with SMTP id adf61e73a8af0-3cd010a32cdmr12382078637.8.1787177021286; Wed, 19 Aug 2026 15:03:41 -0700 (PDT)
MIME-Version: 1.0
References: <CADNypP-Jfeyut1s_jEOf0=BC-2NbFr9rFDqeohh7baT60+4DrQ@mail.gmail.com> <CAMzqgoy_1+oEYCJP7koTa-FJZE0BZv16O_JkgjCuzQdv4ZbUDg@mail.gmail.com> <CAOgpWZkzrVRYSrOahttTNydR3XrttiRKZr7+NGeUj3VWc0vZtw@mail.gmail.com>
In-Reply-To: <CAOgpWZkzrVRYSrOahttTNydR3XrttiRKZr7+NGeUj3VWc0vZtw@mail.gmail.com>
From: Ilya Grigorik <ilya.grigorik@shopify.com>
Date: Wed, 19 Aug 2026 15:03:15 -0700
X-Gm-Features: AcwNN1Wtj-WecSBgR7ZJxBFnm5BhOmnIBtT2g2WNGf-ib6TKUFk9n93qEJmv25I
Message-ID: <CABd3A8103gnOw=_pkWWmYrWrDcXYDYoy3h-RAvv_voRph0edKA@mail.gmail.com>
To: web-bot-auth@ietf.org
Content-Type: multipart/alternative; boundary="0000000000008152cf06596d9332"
Message-ID-Hash: AL2DCO3HRUC7XKY53HT6DGURRBWDLZ3C
X-Message-ID-Hash: AL2DCO3HRUC7XKY53HT6DGURRBWDLZ3C
X-MailFrom: ilya.grigorik@shopify.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-web-bot-auth.ietf.org-0; header-match-web-bot-auth.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic
List-Id: Authentication of non-human users to human-oriented Web sites <web-bot-auth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/web-bot-auth/fgokf521lCssTm_abTD7TeHf4AI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/web-bot-auth>
List-Help: <mailto:web-bot-auth-request@ietf.org?subject=help>
List-Owner: <mailto:web-bot-auth-owner@ietf.org>
List-Post: <mailto:web-bot-auth@ietf.org>
List-Subscribe: <mailto:web-bot-auth-join@ietf.org>
List-Unsubscribe: <mailto:web-bot-auth-leave@ietf.org>

I support adoption.

We have implemented and use WBA for bot auth at Shopify in production, and
we landed WBA interop for UCP
<https://github.com/Universal-Commerce-Protocol/ucp/pull/483>.

On Wed, Aug 19, 2026 at 1:21 PM Rim Vilgalys <interweb=
40google.com@dmarc.ietf.org> wrote:

> I also support adoption.
>
> Also a big thanks to Thibalt & Sandor for all the work that went into this!
>
> On Wed, Aug 19, 2026 at 4:19 PM Orie <orie@or13.io> wrote:
>
>> I support adoption.
>>
>> On Tue, Aug 18, 2026 at 2:58 PM Rifaat Shekh-Yusef <
>> rifaat.s.ietf@gmail.com> wrote:
>>
>>> All,
>>>
>>> This is an official call for adoption for the *HTTP Message Signatures
>>> for automated traffic* draft:
>>>
>>> https://datatracker.ietf.org/doc/draft-meunier-webbotauth-httpsig-protocol/
>>>
>>> Please, reply on the mailing list, on whether you support or oppose the
>>> adoption of this document by *Sep 1st.*
>>> Remember that the current version is a starting point for this work.
>>>
>>> Regards,
>>>  Rifaat & David
>>>
>>>
>>> _______________________________________________
>>> Web-bot-auth mailing list -- web-bot-auth@ietf.org
>>> To unsubscribe send an email to web-bot-auth-leave@ietf.org
>>>
>> _______________________________________________
>> Web-bot-auth mailing list -- web-bot-auth@ietf.org
>> To unsubscribe send an email to web-bot-auth-leave@ietf.org
>>
> _______________________________________________
> Web-bot-auth mailing list -- web-bot-auth@ietf.org
> To unsubscribe send an email to web-bot-auth-leave@ietf.org
>

v2.46.0 | Report a Bug | By Email | System Status