Authenticating AI Agents: A New IETF Draft on Agent Identity and Authorization

A new IETF draft from authors at OpenAI, Okta, AWS, Ping, and Zscaler argues AI agents should be treated as workloads with short-lived cryptographic identities — not handed your long-lived API keys.