Internet and Protocols digest for 2026-08-20

IETF working groups debated finer AI control categories and post-quantum SSH signature drafts while advancing several adoption calls. Process disputes and definitional questions also marked threads on agent identity, messaging profiles, attested TLS, OAuth metadata, and CBOR validation.

AI control splits inference into system and user input categories

The ai-control working group conducted a lengthy debate on a pull request that would divide inference into separate AI System Inference and AI User Input categories. Eighteen participants exchanged 69 messages focused on definitional clarity for the proposed split. The outcome will shape how protocols distinguish machine-driven processing from direct user-supplied content.

SSH call for adoption of ML-DSA signature drafts

The SSH working group call for adoption of hybrid and pure ML-DSA signature drafts produced 94 messages from 34 participants. Daniel J. Bernstein and the chairs clashed over safety arguments and claims of new AI cryptanalysis. The decision will determine the path for post-quantum signatures in SSH.

WIMSE adoption call for AI agent authentication

The WIMSE working group opened a call for adoption of draft-klrc-aiagent-auth covering AI agent authentication and authorization. Twenty-nine participants discussed distinctions between agent identity and workload identity along with delegation chains. Clear rules here will affect how autonomous agents obtain and exercise credentials.

MLS two-party profile faces adoption pushback

The MLS working group call for adoption of draft-kohbrok-mls-two-party-profile-00 drew criticism on patents, requirements, and draft substance. Eleven participants sent 20 messages before the stated close date. The profile would define a simplified MLS mode for two-party conversations if adopted.

SSH chair moderates complaint over influence claims

An SSH working group chair moderated Ken Kubota following accusations of NSA influence and conflicts concerning ML-KEM hybrid use, with Daniel J. Bernstein also participating. The 14-message exchange involved eight people and highlighted process tensions. Such disputes can slow consensus on hybrid post-quantum mechanisms.

SEAT consolidates threat model for attested TLS

The SEAT working group brought together discussion of threat models and formal properties for attested TLS drafts, adding TEE-specific clarifications. Twelve participants contributed 31 messages. Precise threat models are required before attested TLS can be deployed with confidence in trusted execution environments.

OAuth call for RAR metadata draft draws early support

The OAuth working group call for adoption of the OAuth 2.0 RAR Metadata and Error Remediation draft received unanimous early backing from 14 participants. Twenty-one people produced 22 messages showing broad agreement. The work would refine how rich authorization requests report metadata and remediate errors.

CBOR debate on bignum matching in CDDL

The CBOR list examined whether CDDL #0 must match only major-type-0 integers or must also accept bignum tags under RFC 8610 section 2.3.2. Nine participants exchanged 39 messages on the validation question. The resolution will govern how CDDL tools treat integer encodings that use bignum tags.