IETF Logo Mail Archive

[Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic

Srecko Jovancevic <Srecko.Jovancevic@skgo.org> Wed, 19 August 2026 06:35 UTC

Return-Path: <Srecko.Jovancevic@skgo.org>
X-Original-To: web-bot-auth@mail2.ietf.org
Delivered-To: web-bot-auth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id AE9A112C11F4C for <web-bot-auth@mail2.ietf.org>; Tue, 18 Aug 2026 23:35:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787121316; bh=pYVNIY8jBafteZhM79DrFgOQdysHC+D4iUiQgzSy2mQ=; h=From:To:Subject:Date:References:In-Reply-To; b=oIlISdfoQjZg6s7YtNqUhkwIgMywwBh5UqlrUW39vE/JjO+/bZzr8aHegU37EeK2e ry0vAMHI4Zh+i96DBJRdNeDmV9I/ILbxbOhZio5DnOb3xRr/12eygfiDFNQ9mIhvVm B+G4DZpFmueBMbbsA+RgL3K5GS+lWhB0sUz1cxxU=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=skgo.org
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MJ8OzK-pgoIP for <web-bot-auth@mail2.ietf.org>; Tue, 18 Aug 2026 23:35:15 -0700 (PDT)
Received: from PA4PR04CU001.outbound.protection.outlook.com (mail-francecentralazon11023072.outbound.protection.outlook.com [40.107.162.72]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id F279112C11F45 for <web-bot-auth@ietf.org>; Tue, 18 Aug 2026 23:35:14 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=DYCykuZgRyuaGz1vtVbH6gGSg+/4bh4Y2y5juMCQ1F7cpQXzdxFgTiTB8FYyB7yEVXBKcGPMMmddIsqv1piS0XlSuQbjv1IiiBn7iJdKUJv0c2n/TzdcHFGMJ4SfTL/rXgMAwECdnEwtvl1AAOByOdGYgAeezYhO87VO3RVGAssyl5CF8FNjxpEWfXrc8RtvGpCs6zLARuBvxuFVylMMfSWKzHDinyBu2parxdJFs9Dx3H3vWrF/xC8R7TUX8P3E6b87TjmosqsdrmITuhLxaFD4+9Wg1Gv2YcguZ61lizjEZlEEqa0UP/ftmxZxV+aQb8xC7BnRYGBbKUswZTTDkg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=pYVNIY8jBafteZhM79DrFgOQdysHC+D4iUiQgzSy2mQ=; b=Kvqha6fhypAcCswH8F58WBky80RZCqLImZXiXQPALzaOZ6Xb6ZCibgEnEJEwI0++KEwtGgJfaUBMsjvV8oypoGD7nsQ9hBO4+ycslUAS1pIPYebBpGy1Ky3ObkWcSZCxwSGCwRUDdKpNP9wl4LrePZh5CJ1qrhMiD3f55o6kaiInJfC785wNMY5Ovz1H91InxDgxWoxIFqa+AHpBfr+njdq48z3vfUda17+dUVyIS1EZusmzKmwFHP4VUxGBy0Krb32bMT9V+X790WWVC2f05zyOkCywCQ0+KtpVQIuuDk03YySGcpgvzPygbSi20l3LuSMQiytLQubwDGQzlCOFew==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=skgo.org; dmarc=pass action=none header.from=skgo.org; dkim=pass header.d=skgo.org; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=skgo.org; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pYVNIY8jBafteZhM79DrFgOQdysHC+D4iUiQgzSy2mQ=; b=aQvM6fovBkpCy/9Vc1+LydO8YxnpRnK4du/aUunRlPI/J85G2NnBiyI5dIrQPzIM4o0s2r+pPGadnL7KC2yIgAeVH3LS4dOKhTUVtEHcknoXX1e3SywA2YzZ2U0Hq/60RZxdfFgbkofStOG6q65hacztnPgSiNcPBrN1rynRuzGlw63OV4xSVdHUjiR9ZXEhnPg+C+1YMtPveJ5DqDsPALsX6s6DW7KHNqUWWZ79kaecPvagJyfCMbe+qV8GYBHfTaJNtzf0CaGT91Gj97qBXfhhls/eHIh0fjf6rBl6cYfzoflfXS2UPPWABgKos+neKFQxoFhtChkjEnOxYrcMKg==
Received: from DBBPR01MB10651.eurprd01.prod.exchangelabs.com (2603:10a6:10:52f::11) by GV1PR01MB10892.eurprd01.prod.exchangelabs.com (2603:10a6:150:20b::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 06:35:04 +0000
Received: from DBBPR01MB10651.eurprd01.prod.exchangelabs.com ([fe80::b0ac:f2ae:5ed3:491e]) by DBBPR01MB10651.eurprd01.prod.exchangelabs.com ([fe80::b0ac:f2ae:5ed3:491e%3]) with mapi id 15.21.0339.007; Wed, 19 Aug 2026 06:35:04 +0000
From: Srecko Jovancevic <Srecko.Jovancevic@skgo.org>
To: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>, "web-bot-auth@ietf.org" <web-bot-auth@ietf.org>
Thread-Topic: [Web-bot-auth] Call for adoption - HTTP Message Signatures for automated traffic
Thread-Index: AQHdL0v5pOs3vSldmUGsH0ZPezqdV7ak6v96
Date: Wed, 19 Aug 2026 06:35:04 +0000
Message-ID: <DBBPR01MB106513303FAAE757A5F36565795A52@DBBPR01MB10651.eurprd01.prod.exchangelabs.com>
References: <CADNypP-Jfeyut1s_jEOf0=BC-2NbFr9rFDqeohh7baT60+4DrQ@mail.gmail.com>
In-Reply-To: <CADNypP-Jfeyut1s_jEOf0=BC-2NbFr9rFDqeohh7baT60+4DrQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=skgo.org;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DBBPR01MB10651:EE_|GV1PR01MB10892:EE_
x-ms-office365-filtering-correlation-id: 2d4fa781-f341-47c6-881b-08defdbc00cd
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|376014|1800799024|23010399003|3023799007|38070700021|56012099006|8096899003|10067099003|13003099007|18002099003|22082099003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DBBPR01MB10651.eurprd01.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(1800799024)(23010399003)(3023799007)(38070700021)(56012099006)(8096899003)(10067099003)(13003099007)(18002099003)(22082099003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: cFHwMlSREviyp91Eij99DMBEPYM3OkD9vOTdGNXdTC8RZNxxpiGgHdgtr0k2UIh2API3Tjlu7WEqnAhZ3Ez39OkK175Xj2bZGSAj3qeEPIJsok9r+9H2mGoLJqvnGFXETxfOZhW+/QvrBsDnJjnvfUh7MkARXplrDdXvMYr9XpRWU9giIMx1Wp0Iqmd0tGLGyA2GRBkvwDwc85mDcx9I1N4uzVNzutHQ7vRrCv0GwBF6to34iWE8P7AYAQNQzd4DiQNhq3+MSIQDA90p5S6fMKm+oC/Y74oDwCFL8WGvNzvFhVz/WjOFvxnkH+czpAPR3h2dirPLiD5LKWu30LvlmsgKunfFR3BxTgz5AD5UQrYlzr/XjA5OCf+GlynepVZ0qk8+pzzvOTNIY0JIcZ7sPhtKoTHg/XxzACwfPyI3KW0NTs/dMx35NbSSjBueP4glw0+3ndCW+lwqHGvoKYsacJtJcSHAX2VkH6KGJbdTDpv6DZS8ph6OaPZ8J49QrzlwuNwZ1Lqa1ovvf3uICqiAXdkx46blZTu9oadC7GLCqkHh0vELEAvLp+B5iHByifrgn5wH7j/3Mgqyb8tQPZ/El7DPIJp1SblbbUhtBEZAa+Zo5clmQNp3sXGNjs2EbacIkw2JVpc29WhzqZjWAeyZFvwarFndeeEXqUXap8GrU0pDKnyxXOC+d4yljB3wDVYEwEz2XU/98UPOmT4dJVxVJs++F64MVL7tQzNL+9bupBHFiOzxQxldc0DxsDlxcslUzBpof4NEG07VU2a6NUUcE3RySihm3eX4plRzzVL3vS5v+oyEBMDH1mVaPQR1iuEUO/Q9EJZ0xQbZeGBD3PMVjsfswXkOi4x8Ww425sOHUXS/82ZwWdTtGhPo4snvcDhOSoxL0xn34VyXGgRZ7POsi+otedeGk7NiXRGBpu62TJw2AwY6SCDmRo4vVUfdwG2DwdmFeySZ0aQqR45vLyxbvJJvVocP+DsL4j1j3I9Fvb7sC1CE49f21bYzE88B6JrTtLsTBsU3UHexwtb7VcTfdPAMUqo68Ddl6z1K/vkmXPGi/5GEky3j39fxzPQw7At1UVqbMtN3mNBztjqpWIyYjCuuvYlgVdlRTYr6QFW1knAzJuwmZgrUD+T1s2hlGCcO77+tWPFqCOJfBe3FL9pvk2qH9ez/AHFplPp7YTjfu9ZhZ55e6fIBsxH38Et1no2KrmCdSb8GrCyvcNT/lm361xYMH1Ak6CmLEpOk9xwWEMERyoEjtNyufd1Fhfwf3LUVN5YtRAnjrVS+uunRG3HQQh3kniSG77kdiaDvYIfyaEE24K3gHOGVq+vCF+WQvlpQ58rzYoOAefZ/pHoL4FZBzVC3xFTF+Y77eTQYdbPrLecfNQIvGtFE60jnuEGSfZIKKuzWpNHHZLjJhU/GDdU2m7QwCRNwy1XvUkLv+NfPd6M8fC+bCk+iL7I+dbE+TjRMdhu+Eivca1VIwlGDN9bCUKFy4UsMUQIXoDCvyrt+u2adQmfsyGM5a6BWxXssCxJ3WKTzsIM5rVP4w0z+EPlHZ37BZCDWLC1iLZm1VDFfbxlYdPcUcyF55h3LtekVMxNrVj+Gt+WZkACEqxoklgtCZfE7Yq1uMqcretLYjA3nR3CbIlsDwiio8rluXK1sY1eNn0Q8QArQGWn6qbAxgALIGqCPcgVgsdbM28F6DYe5ku3jVJrPpISEdWTt2sbh53tlllEMlnvZkHU5Head656peQ==
Content-Type: multipart/alternative; boundary="_000_DBBPR01MB106513303FAAE757A5F36565795A52DBBPR01MB10651eu_"
MIME-Version: 1.0
X-OriginatorOrg: skgo.org
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DBBPR01MB10651.eurprd01.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2d4fa781-f341-47c6-881b-08defdbc00cd
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Aug 2026 06:35:04.2055 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 137034e0-ca6a-4240-879f-e11dda4d7a28
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: RAULEDlCw9S4JWEDOy7g1ojEpPILxSdq67D1Dfp0WLvrr1TnMwRU2AFJOC7LWrwyNGoZH4kpmJu7HyP0X0N5RthhyphKnM2VHiUkg4xVHtI=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR01MB10892
Message-ID-Hash: TACWRRCBG3XVZJ5NIAPAPUDA2VA7BV7X
X-Message-ID-Hash: TACWRRCBG3XVZJ5NIAPAPUDA2VA7BV7X
X-MailFrom: Srecko.Jovancevic@skgo.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-web-bot-auth.ietf.org-0; header-match-web-bot-auth.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic
List-Id: Authentication of non-human users to human-oriented Web sites <web-bot-auth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/web-bot-auth/hlWNR5xGos8OaOFs8Ai84HTqaNQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/web-bot-auth>
List-Help: <mailto:web-bot-auth-request@ietf.org?subject=help>
List-Owner: <mailto:web-bot-auth-owner@ietf.org>
List-Post: <mailto:web-bot-auth@ietf.org>
List-Subscribe: <mailto:web-bot-auth-join@ietf.org>
List-Unsubscribe: <mailto:web-bot-auth-leave@ietf.org>


Hi Rifaat, David,

Support.

Signing the message (WHAT) and establishing agent identity (WHO) are complementary layers, not competing ones. A stable, well-scoped baseline for the signature layer is exactly what higher-layer identity and accountability work builds on, so having this as a working group document is a sound foundation to build from.

Support for adoption as a starting point.

Best regards,
Srećko Jovančević
________________________________
From: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Sent: Tuesday, August 18, 2026 9:58 PM
To: web-bot-auth@ietf.org <web-bot-auth@ietf.org>
Subject: [Web-bot-auth] Call for adoption - HTTP Message Signatures for automated traffic

All,

This is an official call for adoption for the HTTP Message Signatures for automated traffic draft:
https://datatracker.ietf.org/doc/draft-meunier-webbotauth-httpsig-protocol/

Please, reply on the mailing list, on whether you support or oppose the adoption of this document by Sep 1st.
Remember that the current version is a starting point for this work.

Regards,
 Rifaat & David

v2.46.0 | Report a Bug | By Email | System Status