Agentic web daily · 2026-10-22
IETF WIMSE HTTP Signatures reaches draft -08 as WebBotAuth JAFAR enters expiry review
IETF WIMSE recorded draft-ietf-wimse-http-signature-08 for workload-to-workload HTTP message signing, while the JAFAR Web Bot Auth draft reached its 23 Oct review threshold.
Stories
1. IETF WIMSE updates workload HTTP signature draft to revision -08
spec Workload Identity in Multi System Environments
The IETF Workload Identity in Multi System Environments (WIMSE) working group updated draft-ietf-wimse-http-signature to revision -08 on the Datatracker, aligning workload identity token binding with RFC 9421 HTTP Message Signatures.
Why it matters: Implementers combining SPIFFE/WIMSE workload identities with RFC 9421 request signing should track the -08 signature profile.
- draft-ietf-wimse-http-signature - IETF Datatracker · datatracker.ietf.org · 2026-10-20 VERIFIED
The numbers
We re-check a fixed panel of 219 domains every day through the same /check/ report anyone can run. 218 answered today (1 could not be checked and are left out of every comparison). This is the first snapshot, so there is nothing to compare yet.
| A+ | A | B | C | D | F |
|---|---|---|---|---|---|
| 10 | 21 | 76 | 70 | 6 | 35 |
Adoption across the panel
| Standard | Domains | Change |
|---|---|---|
| AI Crawler User-Agent Tokens in robots.txt | 173 / 218 | – |
| llms.txt | 105 / 218 | – |
| Content Signals Policy | 36 / 218 | – |
| api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs | 19 / 218 | – |
| OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization) | 19 / 218 | – |
| AI Catalog well-known file | 17 / 218 | – |
| AGENTS.md | 14 / 218 | – |
| Agent2Agent Protocol | 13 / 218 | – |
| OAuth Client ID Metadata Document | 13 / 218 | – |
| Model Context Protocol | 7 / 218 | – |
| MCP Server Cards (SEP-2127) | 7 / 218 | – |
| agents.txt | 6 / 218 | – |
| Agentic Resource Discovery | 6 / 218 | – |
| auth.md | 6 / 218 | – |
| Really Simple Licensing | 3 / 218 | – |
| Text and Data Mining Reservation Protocol | 3 / 218 | – |
| Web Bot Auth HTTP Message Signatures | 3 / 218 | – |
| Identity Assertion JWT Authorization Grant | 2 / 218 | – |
| Agent Directory Service | 1 / 218 | – |
| agent-permissions.json | 1 / 218 | – |
| agents.json | 1 / 218 | – |
| Agora Protocol | 1 / 218 | – |
| Universal Commerce Protocol | 1 / 218 | – |
Official MCP Registry: 1708 servers (3000 versions) published or updated since 2026-10-19.
Changes to our records
- Workload Identity in Multi System Environments (WIMSE) Architecture: Datatracker shows draft-ietf-wimse-http-signature-08, dated 2026-10-20 (related draft) · source VERIFIED
- JAFAR: A JSON-Based Format for Publishing IP Ranges of Automated HTTP Clients: draft-illyes-webbotauth-jafar-00 expires on 2026-10-23 · source VERIFIED
How this digest was made
Items are written only from the cited sources and our own measurements; every number in an item appears in a source it cites. VERIFIED = fetched from the standard's issuer or a standards body; REPORTED = a claim by press or a third party.
Sources searched: feeds 0, datatracker 0, hn 0, arxiv 12, exa 107, parallel 5, tips 19. 143 candidates, 130 new, 49 kept by triage (claude-haiku-5-5), 30 facts given to the writer (claude-opus-5-5).
Window 2026-10-21T21:00:00Z to 2026-10-22T21:00:00Z. Generated 2026-10-22T21:00:00Z. Licence CC BY 4.0.