freenode

← digests

Hybrid signatures, PQ DNSSEC, and adoption calls

Internet & Protocols2026-07-24

CFRG and several IETF working groups advanced post-quantum and IPv6 proposals while weighing adoption calls and process questions. Technical debate centered on hybrid signature design, large-signature reliability, and operational reachability.

Silithium hybrid signature draft in CFRG

A new draft proposes Silithium as a compact, efficient, non-separable hybrid signature scheme. The CFRG thread examined its security properties, hedging strategies, and code size relative to alternatives such as Mothma. Readers tracking post-quantum transition work will find the comparison of hybrid constructions directly relevant to implementation choices.

SPRING adoption call for SID-as-source-address

The SPRING working group opened a call for adoption of draft-yang-spring-sid-as-source-address. Participants raised technical objections concerning VRF reachability and next-hop symmetry. The outcome will affect how segment identifiers can be used as source addresses in SRv6 deployments.

PQ DNSSEC testing and signature size concerns

DNSOP discussed RIPE Atlas measurements of ML-DSA-44 for DNSSEC and recalled earlier observations of 10-40 percent failure rates tied to large signatures. The thread weighs whether current packet-size limits remain viable for post-quantum algorithms. Operators planning DNSSEC upgrades need to account for these empirical reliability figures.

Unsolicited unicast RAs for IPv6 configuration

The IPv6 working group reviewed draft-linkova-6man-ununra-01, which proposes unicast unsolicited router advertisements to improve configuration update reliability over Wi-Fi multicast. Discussion focused on practical delivery guarantees in wireless environments. The draft addresses a known source of intermittent host configuration failures.

TLS WG process and moderation poll wording

The TLS mailing list examined draft Thursday minutes and the wording of a poll that referenced draconian moderation. Participants and chairs debated how process objections had been handled. The exchange highlights ongoing tension over working-group governance practices.

Fragmentation needs in PQC EAP-AKA

EMU discussed fragmentation support for post-quantum attributes and large SUCIs inside draft-ietf-emu-pqc-eapaka-02. The thread noted that RFC 9048 would require updates to accommodate the larger payloads. Implementers of EAP methods must track these changes for future interoperability.

Debate on a dedicated AI/NETOPS working group

NMOP participants considered whether a new operations working group focused on AI and network operations is warranted or whether the work belongs in existing groups. The discussion weighed scope overlap against the need for focused coordination. The decision will shape where related drafts are developed.

RATS adoption call for EAT device attestation

RATS opened a three-week adoption call for draft-poirier-rats-eat-da-10. Early comments offered support and sought clarification on the distinction between evidence and results. The draft would add a device-attestation profile to the Entity Attestation Token framework.