[Wimse] Re: New Version Notification for draft-sheffer-wimse-s2s-protocol-00.txt

[Pieter Kasselman <[e-mail]>]

Thanks Yaron, Brian, Arndt, Daniel and Joe

The chairs would like to thank the design team for all the work that has gone into preparing this draft.

We would like to encourage all working group members to review it, open GitHub issues and bring specific points for discussion to the mailing list.

We look forward to discussing this draft in Vancouver.

Pieter and Justin


From: Yaron Sheffer <[e-mail]>
Sent: Wednesday, July 3, 2024 7:24 PM
To: [e-mail]; Arndt Schwenkschuster <[e-mail]>; Brian Campbell <[e-mail]>; Daniel Feldman <[e-mail]>; Joe Salowey <[e-mail]>
Subject: [Wimse] Re: New Version Notification for draft-sheffer-wimse-s2s-protocol-00.txt

Apologies for this mess. Maybe it's time for the IETF to standardize email...

This draft is the product of the service-to-service design team, and
defines the protocol between two workloads communicating over HTTP
(a.k.a. REST).

This is still an individual draft. We plan to present it to the WG in
Vancouver and ask the group to adopt it.

Comments of course are most welcome. Until the draft is adopted, it is
managed here: https://github.com/yaronf/wimse-s2s
Feel free to open PRs/issues.

Thanks,
     Yaron and the design team



On 03/07/2024, 21:06, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>> wrote:
A new version of Internet-Draft draft-sheffer-wimse-s2s-protocol-00.txt has
been successfully submitted by Yaron Sheffer and posted to the
IETF repository.

Name:     draft-sheffer-wimse-s2s-protocol
Revision: 00
Title:    WIMSE Service to Service Authentication
Date:     2024-07-03
Group:    Individual Submission
Pages:    21
URL:      https://www.ietf.org/archive/id/draft-sheffer-wimse-s2s-protocol-00.txt
Status:   https://datatracker.ietf.org/doc/draft-sheffer-wimse-s2s-protocol/
HTML:     https://www.ietf.org/archive/id/draft-sheffer-wimse-s2s-protocol-00.html
HTMLized: https://datatracker.ietf.org/doc/html/draft-sheffer-wimse-s2s-protocol


Abstract:

   The WIMSE architecture defines authentication and authorization for
   software workloads in a variety of runtime environments, from the
   most basic ones up to complex multi-service, multi-cloud, multi-
   tenant deployments.  This document defines the simplest, atomic unit
   of this architecture: the protocol between two workloads that need to
   verify each other's identity in order to communicate securely.  The
   scope of this protocol is a single HTTP request-and-response pair.
   To address the needs of different setups, we propose two protocols,
   one at the application level and one that makes use of trusted TLS
   transport.  These two protocols are compatible, in the sense that a
   single call chain can have some calls use one protocol and some use
   the other.  Service A can call Service B with mutual TLS
   authentication, while the next call from Service B to Service C would
   be authenticated at the application level.



The IETF Secretariat