Issues

• Section 5.5.1: alg is restricted to one registry while the container is a JWKS pointing at another

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#136 · Filter by author kakooch opened on Sep 26, 2026
  1

• E.2.1: signature label "sig2" does not match Signature-Agent member "agent2"

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#135 · Filter by author FearmessOp opened on Sep 19, 2026
  1

• ID Migration

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#134 · Filter by author sandormajor opened on Sep 11, 2026
  1

• §5.2: "expiry" is separated from its antecedent and reads as key expiry

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#133 · Filter by author pierluc-codes opened on Sep 9, 2026

• 5.2.1 label-keying MUST vs the Appendix E vectors, and whether 5.2.2 already carries the property

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#128 · Filter by author AVAVERIFY opened on Aug 19, 2026
  2

• [protocol] Unencoded-Digest vs Content-Digest

  protocol
  webbotauth/draft-ietf-webbotauth-httpsig-protocol#126 · Filter by author thibmeu opened on Aug 18, 2026

• 301 on a Signature-Agent

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#119 · Filter by author thibmeu opened on Aug 11, 2026
  2

• Shorter names 🚲🏠

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#116 · Filter by author martinthomson opened on Aug 6, 2026
  2

• Tracking text is backwards

  enhancementprotocol
  webbotauth/draft-ietf-webbotauth-httpsig-protocol#115 · Filter by author martinthomson opened on Aug 6, 2026
  1

• Binding to humans

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#114 · Filter by author martinthomson opened on Aug 6, 2026
  6

• Key format

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#109 · Filter by author martinthomson opened on Aug 6, 2026
  6

• [directory] DNS-rooted key discovery: bind the Signature-Agent key with a DANE-EE TLSA record under a DNSSEC-signed name

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#102 · Filter by author kakooch opened on Jul 9, 2026
  3

• proposal: distinguish same-origin TLS binding from delegated signing

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#100 · Filter by author igrigorik opened on Jun 19, 2026
  2

• Implementers to fall back on existing verification methods

  bug
  webbotauth/draft-ietf-webbotauth-httpsig-protocol#93 · Filter by author sandormajor opened on Apr 24, 2026
  7

• Remove rfc7638 requirement from keyid and make it match kid

  protocol
  webbotauth/draft-ietf-webbotauth-httpsig-protocol#67 · Filter by author sandormajor opened on Sep 20, 2025
  7

• Consider a mechanism for identifiers (and abuse reporting)

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#60 · Filter by author chhamilton opened on Sep 9, 2025

• HTTP Message signature to allow filtering based on key thumbprint

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#52 · Filter by author thibmeu opened on Sep 1, 2025
  3

• Directory endpoint should support nonce signing

  question
  webbotauth/draft-ietf-webbotauth-httpsig-protocol#45 · Filter by author thibmeu opened on Jun 18, 2025

• Consider describing chaining

  enhancement
  webbotauth/draft-ietf-webbotauth-httpsig-protocol#27 · Filter by author thibmeu opened on May 21, 2025
  2

  

• Consider integration of Signature-Agent with robots.txt

  webbotauth/draft-ietf-webbotauth-httpsig-protocol#19 · Filter by author thibmeu opened on May 12, 2025
  5

• Consider negative test vectors

  enhancement
  webbotauth/draft-ietf-webbotauth-httpsig-protocol#11 · Filter by author thibmeu opened on Apr 25, 2025
  3