[WIMSE] WIMSE @ IETF 126: Meeting summary and follow-ups

Pieter Kasselman <pieter@defakto.security> Thu, 30 July 2026 13:15 UTC

Return-Path: <pieter@defakto.security>
X-Original-To: wimse@mail2.ietf.org
Delivered-To: wimse@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 85E561210E2C8 for <wimse@mail2.ietf.org>; Thu, 30 Jul 2026 06:15:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1785417331; bh=XFlCxwULFegOLUuKjxR4iMlxtZdd0ZAAH5dUr++VuLo=; h=From:Date:Subject:To; b=cEU4nvHWVFdsTvnDG9FRON57TeljHXdeCzGSxen5nYGY1+BkNpJnLOv/bPSfDyNFq ubxrRoAp+7ygGd9yPpUwjMA+K9BHYhSfKay+Hi8Ig5BbEP5GEIb+K4Uo5VZ49iAa+q ebSKev5wyIcDUCEpCCueb4gSszdYokTr9uEr7baw=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=defakto.security
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tmet5GM-uWpq for <wimse@mail2.ietf.org>; Thu, 30 Jul 2026 06:15:31 -0700 (PDT)
Received: from mail-ua1-x92e.google.com (mail-ua1-x92e.google.com [IPv6:2607:f8b0:4864:20::92e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 1D0501210E2C3 for <wimse@ietf.org>; Thu, 30 Jul 2026 06:15:31 -0700 (PDT)
Received: by mail-ua1-x92e.google.com with SMTP id a1e0cc1a2514c-977310532a7so511290241.0 for <wimse@ietf.org>; Thu, 30 Jul 2026 06:15:31 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1785417324; cv=none; d=google.com; s=arc-20260327; b=l9TuU2I4rWCuwb/d+i36HKHNvdXSCnQYc4f78buGdfkP/0XKis5Hl/+2n+gUV7q61Q pMmA/3BjazfY79yElQA4nuqCXrTLUDhOMUJdcNseDT28zlNUVoR2Wu21kVKmGIl90Uao BRa6wGg6OnG3fJXGH0nPUY61shAXf6BjXaxnAqlkhhShl2UuIkBWabMTD+exa+LYCc5w F9LAB4arjGsaIwFFs36WthwNoa05kR9NLzadrm3aclC7grfJ03h/hbLp0LPg3M8nFuYs JhFl33J7cKRhPD/cpOJwhoseGW0lZfIPzCY87Ahq4u2F/zECkY8O4pFuvhi6F7hUVuIQ ASeQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=XFlCxwULFegOLUuKjxR4iMlxtZdd0ZAAH5dUr++VuLo=; fh=dKf12lvXI2hCnl/KA9R7oCcFEAwSsHLNkPOLsc5fVHc=; b=cwtRI0RlJQfxByBVl5mGzLoFkhLtJxhay92oKbjulvysa99BcKg42l8RcBRSCg1Cav YUv6bPTzqCY6/RRY5T9FT2NlVx5o71OZ54WYypWTVR4MVahFHRWaB2THcJ43yYO////P 7B94xF3LtxmsnmRapcJLXI/mJwNx+I75ppoHydOR/yI7to0SoGHJMM9zm4adMvQddqy0 lPZA9PNlqqurVXVDHHBlkjqwNRTF96aNYQNIJPT2tijZscqo2fKsT+0zTaXoH0O7em7Y yvLpogMzgsFDTMUv+2oTWl9ugKg8D9Vj+fLDJmWh5hY9qk+sQY1y7nyV0fc+OKIkTVgK hjlQ==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=defakto.security; s=google; t=1785417324; x=1786022124; darn=ietf.org; h=content-type:to:subject:message-id:date:from:mime-version:from:to :cc:subject:date:message-id:reply-to:content-type; bh=XFlCxwULFegOLUuKjxR4iMlxtZdd0ZAAH5dUr++VuLo=; b=GHjITh9on6aYxg8uNn7xhPxeq4Uz0afFNviN6f171NimTTbzGxEjhux2YX+/XxG9XM VjAinO0FdLKilyeG+rn0NbQsNxBhtb9DTUSirXnXTm5XNxbvbUY2P4GifiZa5RxT08Zx Hep+drT6AT09ZBQXS5lZaYFDTgSI8o3TG36/7Npt8y4tMuEyZfI0Rhf1tfpLZcChQX+y Dynmdngt1zq7x7ScH7hfWFZS+52wvyjUDwijnqjJqYMLWvRZ8M10k++1USEvPGezg+8o 9D/XJRKBnMH88UeV29pxDtXFjbosAZejV9lxO9Vyl5WFFMexVX3V/xXcx0krfGPeXqdP /dQQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1785417324; x=1786022124; h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=XFlCxwULFegOLUuKjxR4iMlxtZdd0ZAAH5dUr++VuLo=; b=Pqs0ZqB6W97RpCh43XqqwL/5uRsixYGwvJzfeNw/+mGGJdceIpqTCtn9EpcaoNgPsG TuWZ4EjPtyNSFJd+O6KazzA4vkHOVOjCN+YUbDUMxc2ceBBhDJfdd9MFKXX3db0MsdZ3 js9xsF3pg3vqCBYoqTrN5r/Cq9vtmqrTu+IQrEqvivFhba09qi1V5IPLg8opvhl0ZMA2 +3MlIWV3EJe3Q9rJlH1gKsJcVp1ZbFBdmNYxiFyQD3C+yERYAsWytyXFdyNfaMXPXKoU hStZfkAXhQFmROn2CjcPfDigXumSt1sxTv7HqkrwglhncvecwV3dDdGpf0h18Y97Rh88 ZeqA==
X-Gm-Message-State: AOJu0Ywd116Qxal43Ac7W6JCFDk0UJSc147jL13n2ai4pNZEQhUo04Rg l1/dRhqEQw365zddKnv4Y2F3iQXaboFXeQO0xOcYyFXHqLkpcnhTb6XK2DED8bTIkkJjcpVAlmF EzmAMDsk7vM610XbLkyMVpP2wqlljbpqOh/7xOjH7D0RLdBWYcfzL2B7Jyw==
X-Gm-Gg: AR+sD10b9mMV/BavnrycPBejFdHjRFVAq43a2zrHLbCNdNKnt1Ze/35xy/iyebiF7rB liQSZvTJfHakjObMdJEJkxmctf2brYzcRS38wDtULK0njFv7CeCaYom6Ow+7BlsAf9WhRSdZyfJ vtCWkX9GXNsme5cGDIWpXO3xz5PDFUKZ28BTLXpBLk/VaRNlL9A52jo8Uz3FMGpbe1LnEn3WKQ2 wDhj8F6QDdv29vGxv2MBDfqzMdTO3BggknoMGHPLfDS/qTvm3LdaYO5u4eEzYc7J8aIwOC2OaX+ hte5in9BVMlxcobFlHghjrzscBQxuJ/qUY9hKF3vd3KquBYAd/E67VOPOKDT87fbhZu/gvF/+Nu CvzsOwfF+LDCWBuuFPkQdYwu6/u+Y0nhFCMbPJbshhI9J
X-Received: by 2002:a67:f7c5:0:b0:745:4670:42fd with SMTP id ada2fe7eead31-7582b2f97fdmr88921137.20.1785417324327; Thu, 30 Jul 2026 06:15:24 -0700 (PDT)
MIME-Version: 1.0
From: Pieter Kasselman <pieter@defakto.security>
Date: Thu, 30 Jul 2026 08:15:13 -0500
X-Gm-Features: AUfX_mxBYOizQm6-u-yQC_CNCT2q0VEM-IZDYcFGzqjyr7sT2Clw8wTE3U4dVhY
Message-ID: <CALtWOA3iEfpWjU6B_mqfvzM_WqN=+FQQnjb3yJ=d9B9qmHYSAw@mail.gmail.com>
To: wimse@ietf.org
Content-Type: text/plain; charset="UTF-8"
Message-ID-Hash: A3ZD72JNW6DLWUOC43WKSJND2WTIOOL7
X-Message-ID-Hash: A3ZD72JNW6DLWUOC43WKSJND2WTIOOL7
X-MailFrom: pieter@defakto.security
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [WIMSE] WIMSE @ IETF 126: Meeting summary and follow-ups
List-Id: WIMSE Workload Identity in Multi-Service Environment <wimse.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/wimse/eR7Cesswrsvzl6e5DqmxMfzeAgM>
List-Archive: <https://mailarchive.ietf.org/arch/browse/wimse>
List-Help: <mailto:wimse-request@ietf.org?subject=help>
List-Owner: <mailto:wimse-owner@ietf.org>
List-Post: <mailto:wimse@ietf.org>
List-Subscribe: <mailto:wimse-join@ietf.org>
List-Unsubscribe: <mailto:wimse-leave@ietf.org>

Dear WIMSE enthusiasts!

Thanks for all the contributions and discussions from editors, authors
and working group members at the WIMSE working group meeting during
IETF 126.

The meeting minutes are available on Datatracker [1]. Special thanks
to Arndt Schwenkschuster and Jeff Lombardo for taking notes.

If you missed the meeting and want to watch the recording, it is now
available [2] and you can find all meeting materials at [3]. All of
these links are available at the WIMSE working group's website [4].

If there is interest in discussing specific topics before IETF 127,
please raise it on the mailing list. If there is sufficient interest
we can schedule interim meetings to discuss them.

The chairs will issue the following Working Group Last Calls over the
next couple of weeks:

1. Workload Authentication Using Mutual TLS [5].
2. Workload Identifier [6].
3. WIMSE Workload-to-Workload Authentication with HTTP Signatures [7].

In addition, there will be a Working Group Call for Adoption coming
from Justin for the AI Agent Authentication and Authorization draft
[8].

Pieter and Justin

WIMSE Chairs

[1] https://datatracker.ietf.org/meeting/126/materials/minutes-126-wimse-202607201200-00
[2] IETF 126: Workload Identity in Multi System Environments (WIMSE)
2026-07-20 12:00
[3] https://datatracker.ietf.org/meeting/126/session/wimse
[4] https://ietf-wg-wimse.github.io/
[5] https://datatracker.ietf.org/doc/draft-ietf-wimse-mutual-tls/
[6] https://datatracker.ietf.org/doc/draft-ietf-wimse-identifier/
[7] https://datatracker.ietf.org/doc/draft-ietf-wimse-http-signature/
[8] https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/