On Sun, Feb 2, 2020 at 8:49 AM Eric Rescorla <ekr@rtfm.com> wrote:
> Hi folks,
>
> I do not believe we should initiate work in HTTP on HTTP Request
> signatures starting with draft-richanna-http-message-signatures.
>
> My high order concern is that we seem to be starting to build a
> piecemeal object security system for HTTP without any kind of
> coordination or common architecture. So far, we have standardized or
> proposals to standardize:
>
AWSv4 is the de facto standard, for better or worse.
I view this task as an inspection of that.
thanks,
Rob