ERC-8128: Signed HTTP Requests with Ethereum

jacopo-eth · January 19, 2026, 10:22pm

Discussion for ERC-8128: Signed HTTP Requests with Ethereum — a standard for authenticating generic HTTP requests using Ethereum accounts via HTTP Message Signatures.

github.com/ethereum/ERCs

Add ERC: Signed HTTP Requests with Ethereum

master ← slice-so:temp-eth-http-message-signatures

opened 05:16PM - 16 Jan 26 UTC

jacopo-eth

+524 -0

ERC-8128 defines a standard for signing HTTP requests with Ethereum accounts. Bu…ilt on RFC 9421 (HTTP Message Signatures), each request carries a cryptographic proof bound to its content — stronger than API keys or sessions, which can be stolen and reused. The client defines the security posture, and compliant verifiers always accept the strictest stance, allowing clients to never weaken their guarantees. Request-binding and non-replayability provide flexibility for both high-security operations and high-performance scenarios, with granular control over what each signature authorizes.

Feel free to join the Telegram group for more synchronous discussions.