I-D Action: draft-hardt-httpbis-signature-key-05.txt

Internet-Draft draft-hardt-httpbis-signature-key-05.txt is now available. It
is a work item of the HTTP (HTTPBIS) WG of the IETF.

   Title:   HTTP Signature Keys
   Authors: Dick Hardt
            Thibault Meunier
   Name:    draft-hardt-httpbis-signature-key-05.txt
   Pages:   36
   Dates:   2026-06-17

Abstract:

   This document defines two HTTP header fields and one Accept-Signature
   parameter for use with HTTP Message Signatures as defined in RFC
   9421.  The Signature-Key request header distributes public keys used
   to verify signatures, with five initial key distribution schemes:
   pseudonymous inline keys (hwk), self-issued key delegation via JWK
   Thumbprint JWTs (jkt-jwt), identified signers with JWKS URI discovery
   (jwks_uri), JWT-based delegation (jwt), and X.509 certificate chains
   (x509).  The sigkey parameter extends Accept-Signature (RFC 9421
   Section 5) to indicate the type of Signature-Key the server requires.
   The Signature-Error response header provides structured error
   information when signature verification fails.  Together, these
   mechanisms enable flexible trust models ranging from privacy-
   preserving pseudonymous verification to horizontally-scalable
   delegated authentication and PKI-based identity chains.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-hardt-httpbis-signature-key/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-hardt-httpbis-signature-key-05.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-hardt-httpbis-signature-key-05

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts

Received on Wednesday, 17 June 2026 13:45:08 UTC