[Wimse] I-D Action: draft-ietf-wimse-s2s-protocol-01.txt

[[e-mail]]

Internet-Draft draft-ietf-wimse-s2s-protocol-01.txt is now available. It is a
work item of the Workload Identity in Multi System Environments (WIMSE) WG of
the IETF.

   Title:   WIMSE Service to Service Authentication
   Authors: Brian Campbell
            Daniel Feldman
            Joe Salowey
            Arndt Schwenkschuster
            Yaron Sheffer
   Name:    draft-ietf-wimse-s2s-protocol-01.txt
   Pages:   25
   Dates:   2024-10-18

Abstract:

   The WIMSE architecture defines authentication and authorization for
   software workloads in a variety of runtime environments, from the
   most basic ones up to complex multi-service, multi-cloud, multi-
   tenant deployments.  This document defines the simplest, atomic unit
   of this architecture: the protocol between two workloads that need to
   verify each other's identity in order to communicate securely.  The
   scope of this protocol is a single HTTP request-and-response pair.
   To address the needs of different setups, we propose two protocols,
   one at the application level and one that makes use of trusted TLS
   transport.  These two protocols are compatible, in the sense that a
   single call chain can have some calls use one protocol and some use
   the other.  Service A can call Service B with mutual TLS
   authentication, while the next call from Service B to Service C would
   be authenticated at the application level.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-wimse-s2s-protocol/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-wimse-s2s-protocol-01.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-wimse-s2s-protocol-01

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts