Microsoft in this space trying to standardize with IETF?

[deeglaze]

Hi folks, I recently came across a CACM article from Microsoft folks including the Azure CTO about a Code Transparency Service, which sounds exactly like sigstore. Furthermore, there is a new workstream in IETF called SCITT that is attempting to define a standard around such transparency services.

Wondering if any of y'all have seen this and are interested in joining that workstream to avoid an unpleasant situation of API divergence in the attestation ecosystem.