IETF Logo Mail Archive

[Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic

Thibault Meunier <ot-ietf@thibault.uk> Wed, 19 August 2026 08:56 UTC

Return-Path: <ot-ietf@thibault.uk>
X-Original-To: web-bot-auth@mail2.ietf.org
Delivered-To: web-bot-auth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 0823512C1BACF for <web-bot-auth@mail2.ietf.org>; Wed, 19 Aug 2026 01:56:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787129816; bh=j8stq0TluLv6u5bkh85+OMU+RgjlonDdFm0dN0TccZs=; h=Date:To:From:Cc:Subject:In-Reply-To:References; b=FB3f34b7wGH4qYKuxo7g9+zvDBoY1KiIJkvc1TU4Y8R2lxY+Jvuzp9g64GY37vccO Q5unxmUr4yM+xMh0ZsEBoyQJ1ayyiA4GY0RS8DynHfLK6z4FpgNkH71jRkr2+srRr/ Y51jrb2RJXs1ukfHZkGXSPgBFFAom7mJPuhZuRFA=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.796
X-Spam-Level:
X-Spam-Status: No, score=-2.796 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=thibault.uk
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vu62tyeKQcXO for <web-bot-auth@mail2.ietf.org>; Wed, 19 Aug 2026 01:56:55 -0700 (PDT)
Received: from mail-4318.protonmail.ch (mail-4318.protonmail.ch [185.70.43.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 038B012C1BAC8 for <web-bot-auth@ietf.org>; Wed, 19 Aug 2026 01:56:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thibault.uk; s=protonmail; t=1787129813; x=1787389013; bh=j8stq0TluLv6u5bkh85+OMU+RgjlonDdFm0dN0TccZs=; h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References: Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID: Message-ID:BIMI-Selector; b=jTC79c4n2bLy28YvRynyzUnD/KKUdEdzLNkwaWrDfmMeh7LjDnDLUKLLKrqIUbSso 9PItwxI8JmF1bNZ125qyIXGU1V1q5xKItjMnN8vE4JGyp4PgcYj7Z5c/hPzrokvvsN SdGXl0czP8mND+HvyrRlq0N1Lzpuk/sgWzw34tq2H8QJlscwRIHlFZ6oTBbvxXZzy1 HyjZ+5Q/maGSz4rik0Is6vrR640yM43hK7bHo/vWPdKEdtuQXuzYBXamE6CvX5f8r1 tu4uRQ2oqDeYkzJ+L1E1geEM5Ce0Efuhipm6LbSuuAdFBoo45ExXscJIeIBnLzgKH+ TV8Mau/KJ7GIQ==
Date: Wed, 19 Aug 2026 08:56:47 +0000
To: Srecko Jovancevic <Srecko.Jovancevic@skgo.org>
From: Thibault Meunier <ot-ietf@thibault.uk>
Message-ID: <LcO1j_k5vFURICPoFHAd07laWeUrBHuIu_tYSoFXoMgxb_d7fcULCvhp3fmdM5b11U-vmVRf6AyaLbL5EsbRW0KD5wjIQnnG2cOoWqn8Zbc=@thibault.uk>
In-Reply-To: <DBBPR01MB106513303FAAE757A5F36565795A52@DBBPR01MB10651.eurprd01.prod.exchangelabs.com>
References: <CADNypP-Jfeyut1s_jEOf0=BC-2NbFr9rFDqeohh7baT60+4DrQ@mail.gmail.com> <DBBPR01MB106513303FAAE757A5F36565795A52@DBBPR01MB10651.eurprd01.prod.exchangelabs.com>
Feedback-ID: 60844204:user:proton
X-Pm-Message-ID: c971cc9241b0e7ba84bf6ad2abbdee4a313b1a92
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b1=_bDqA03gPzUBjPDsrpiXgUNyzUzLWrHO9XS2pZBScGvM"
Message-ID-Hash: XVWTV4A4NDFIXZPRUV2QAEW5EGMUOT4Z
X-Message-ID-Hash: XVWTV4A4NDFIXZPRUV2QAEW5EGMUOT4Z
X-MailFrom: ot-ietf@thibault.uk
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-web-bot-auth.ietf.org-0; header-match-web-bot-auth.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>, "web-bot-auth@ietf.org" <web-bot-auth@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Web-bot-auth] Re: Call for adoption - HTTP Message Signatures for automated traffic
List-Id: Authentication of non-human users to human-oriented Web sites <web-bot-auth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/web-bot-auth/rvKRRKVYLQx_UpgAIsbnER35NRk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/web-bot-auth>
List-Help: <mailto:web-bot-auth-request@ietf.org?subject=help>
List-Owner: <mailto:web-bot-auth-owner@ietf.org>
List-Post: <mailto:web-bot-auth@ietf.org>
List-Subscribe: <mailto:web-bot-auth-join@ietf.org>
List-Unsubscribe: <mailto:web-bot-auth-leave@ietf.org>

As a co-author, I support adoption.

On Wednesday, August 19th, 2026 at 08:35, Srecko Jovancevic <Srecko.Jovancevic@skgo.org> wrote:

> Hi Rifaat, David,
>
> Support.
>
> Signing the message (WHAT) and establishing agent identity (WHO) are complementary layers, not competing ones. A stable, well-scoped baseline for the signature layer is exactly what higher-layer identity and accountability work builds on, so having this as a working group document is a sound foundation to build from.
>
> Support for adoption as a starting point.
>
> Best regards,
> Srećko Jovančević
>
> ---------------------------------------------------------------
>
> From: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
> Sent: Tuesday, August 18, 2026 9:58 PM
> To: web-bot-auth@ietf.org <web-bot-auth@ietf.org>
> Subject: [Web-bot-auth] Call for adoption - HTTP Message Signatures for automated traffic
>
> All,
>
> This is an official call for adoption for the HTTP Message Signatures for automated traffic draft:
> https://datatracker.ietf.org/doc/draft-meunier-webbotauth-httpsig-protocol/
>
> Please, reply on the mailing list, on whether you support or oppose the adoption of this document by Sep 1st.
> Remember that the current version is a starting point for this work.
>
> Regards,
> Rifaat & David

v2.46.0 | Report a Bug | By Email | System Status