@techreport{meunier-webbotauth-httpsig-protocol-01,
    number =    {draft-meunier-webbotauth-httpsig-protocol-01},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-meunier-webbotauth-httpsig-protocol/01/},
    author =    {Thibault Meunier and Sandor Major},
    title =     {{HTTP Message Signatures for automated traffic}},
    pagetotal = 45,
    year =      2026,
    month =     aug,
    day =       5,
    abstract =  {This document describes a protocol for identifying automated traffic using {[}HTTP-MESSAGE-SIGNATURES{]}. The goal is to allow automated HTTP clients to cryptographically sign outbound requests, allowing HTTP servers to verify their identity with confidence. It defines the Signature-Agent header field for in-band key discovery, a key directory format based on JWKS, and a well-known URI at which that directory is served.},
}