[Wimse] Re: Call for Adoption: Service to Service Authentication

"McAdams, Darin" <darinm@amazon.com> Tue, 13 August 2024 02:30 UTC

Return-Path: <prvs=948192ff4=darinm@amazon.com>
X-Original-To: wimse@ietfa.amsl.com
Delivered-To: wimse@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0EC2C1DA2F9 for <wimse@ietfa.amsl.com>; Mon, 12 Aug 2024 19:30:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.549
X-Spam-Level:
X-Spam-Status: No, score=-4.549 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.148, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kg7rdYT8fwbD for <wimse@ietfa.amsl.com>; Mon, 12 Aug 2024 19:30:23 -0700 (PDT)
Received: from smtp-fw-80008.amazon.com (smtp-fw-80008.amazon.com [99.78.197.219]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99299C1E0D8C for <wimse@ietf.org>; Mon, 12 Aug 2024 19:30:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1723516223; x=1755052223; h=from:to:subject:date:message-id:mime-version; bh=mBvgeTmYUuTze+ZrH+1dgOYqSXBeUKErqkLjvSc6L6U=; b=iLuaoZfIbL57ehSpz4nc9XwYOMpeHSHd8d1MYzOLrrI2KwouA43reuwa 56D6aPVKOEGUe73RwAPfZ2a535utbqi79ACr0Qr+urSWucWwJU+ZcINg2 4aU1QDTE8AMlSe82Z7lTC94Ey2iljjOZUnfnG5knGZofbS/xC4Gf8C/f3 E=;
X-IronPort-AV: E=Sophos;i="6.09,284,1716249600"; d="scan'208,217";a="114909042"
Received: from pdx4-co-svc-p1-lb2-vlan3.amazon.com (HELO smtpout.prod.us-west-2.prod.farcaster.email.amazon.dev) ([10.25.36.214]) by smtp-border-fw-80008.pdx80.corp.amazon.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 13 Aug 2024 02:30:23 +0000
Received: from EX19MTAUWB002.ant.amazon.com [10.0.7.35:23508] by smtpin.naws.us-west-2.prod.farcaster.email.amazon.dev [10.0.21.111:2525] with esmtp (Farcaster) id bc32361e-adf4-40e0-b8c1-2a587c25803c; Tue, 13 Aug 2024 02:30:23 +0000 (UTC)
X-Farcaster-Flow-ID: bc32361e-adf4-40e0-b8c1-2a587c25803c
Received: from EX19D008UWA002.ant.amazon.com (10.13.138.240) by EX19MTAUWB002.ant.amazon.com (10.250.64.231) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.1258.34; Tue, 13 Aug 2024 02:30:22 +0000
Received: from EX19D008UWA004.ant.amazon.com (10.13.138.220) by EX19D008UWA002.ant.amazon.com (10.13.138.240) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.1258.34; Tue, 13 Aug 2024 02:30:22 +0000
Received: from EX19D008UWA004.ant.amazon.com ([fe80::d946:a53:e254:7768]) by EX19D008UWA004.ant.amazon.com ([fe80::d946:a53:e254:7768%5]) with mapi id 15.02.1258.034; Tue, 13 Aug 2024 02:30:22 +0000
From: "McAdams, Darin" <darinm@amazon.com>
To: Pieter Kasselman <pieter.kasselman=40microsoft.com@dmarc.ietf.org>, "wimse@ietf.org" <wimse@ietf.org>, Justin Richer <jricher@mit.edu>
Thread-Topic: [Wimse] Call for Adoption: Service to Service Authentication
Thread-Index: AQHa7Si/xYpjPdL3z0mKNwOh0rDzpg==
Date: Tue, 13 Aug 2024 02:30:22 +0000
Message-ID: <2244A66B-A17B-4465-AE89-549D304EA6DC@amazon.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.86.24062313
x-originating-ip: [10.13.138.67]
Content-Type: multipart/alternative; boundary="_000_2244A66BA17B4465AE89549D304EA6DCamazoncom_"
MIME-Version: 1.0
Message-ID-Hash: SQ355U3JMHYH4X4JUXU4RXVMRXHD7GKA
X-Message-ID-Hash: SQ355U3JMHYH4X4JUXU4RXVMRXHD7GKA
X-MailFrom: prvs=948192ff4=darinm@amazon.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [Wimse] Re: Call for Adoption: Service to Service Authentication
List-Id: WIMSE Workload Identity in Multi-Service Environment <wimse.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/wimse/yqdR6Oqn7b7K070moi103J4MNoo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/wimse>
List-Help: <mailto:wimse-request@ietf.org?subject=help>
List-Owner: <mailto:wimse-owner@ietf.org>
List-Post: <mailto:wimse@ietf.org>
List-Subscribe: <mailto:wimse-join@ietf.org>
List-Unsubscribe: <mailto:wimse-leave@ietf.org>

Vote (A)

From: Pieter Kasselman <pieter.kasselman=40microsoft.com@dmarc.ietf.org>
Date: Monday, July 29, 2024 at 6:55 AM
To: "wimse@ietf.org" <wimse@ietf.org>, Justin Richer <jricher@mit.edu>
Subject: [EXTERNAL] [Wimse] Call for Adoption: Service to Service Authentication


CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe.


Following discussion at the working group meeting at IETF 120 in Vancouver, the chairs would like to call for adoption of WIMSE Service to Service Authentication [1] as a working group document in response to the WIMSE Securing service-to-service traffic deliverable [2]. This document was the output of the Securing service-to-service design team.

In the meeting, support was fairly strong. This is an official call for adoption, please reply to the list to say that:

A) You are in favour of adopting this draft.
B) You are not in favour of adopting this draft (please specify why if possible).
C) You need more information before making a decision (please state what more information you need).
D) You don’t care about this document (i.e., this isn’t a topic you care strongly about).

Please reply to the list by August 12th, 2024.

Thank you,

Pieter and Justin

[1] https://datatracker.ietf.org/doc/draft-sheffer-wimse-s2s-protocol/
[2] https://datatracker.ietf.org/doc/charter-ietf-wimse/01/