IETF moderation and protocol debates

IETF activity focused on formal moderation in the TLS working group and heated disputes over mandatory security language in email and RADIUS drafts. Several other groups advanced last calls and adoption processes for proxying, authentication, and delay-tolerant networking proposals.

TLS Chairs Announce Bernstein Moderation

TLS working group chairs announced a 30-day moderation of postings by D. J. Bernstein for repeated disruptive behavior under IETF rules. The notice was issued on the TLS mailing list. Participants in IETF standards work should note the enforcement of conduct procedures in an active security protocol group.

Emailcore Last Call Debates Mandatory TLS

An IETF last-call thread debated mandating TLS confidentiality in the draft-ietf-emailcore-as SMTP document, with objections based on use cases. The exchange produced 130 messages from 24 participants and centered on a DISCUSS ballot. Email protocol developers have a direct interest in whether confidentiality becomes a required core feature.

OAuth Proposal Treats Login and Session as One Problem

A newcomer proposed Live Keys to merge login and session binding, extending beyond the DPoP and HTTPSig choice. The OAuth working group thread of 17 messages referenced WIMSE AIMS, DBSC, RAR, and posture signals. Authentication system designers may evaluate the approach against existing binding mechanisms.

Last Call Opens for HTTP CONNECT TCP Proxy Draft

IETF last call began for draft-ietf-httpbis-connect-tcp-14, Template-Driven HTTP CONNECT Proxying for TCP, targeting Proposed Standard. One comment raised the risk of URI template collision. HTTP proxy implementers should examine the draft while the call remains open.

RADIUS Group Debates TLS Close After Certificate Failure

The radext working group debated MUST language requiring immediate TLS connection close after a failed certificate check in the final RADIUS/(D)TLS-bis draft. The discussion ran to 38 messages from 8 participants. RADIUS security implementers need to track how the normative requirement is resolved.

DTN Adoption Call for BPv7 Echo Service

The DTN working group opened an adoption call for the BPv7 Echo Service draft through 21 September 2026. Minor service number discussion was resolved by deferring the matter to IANA. Delay-tolerant networking developers should decide whether to support adoption.

Mailmaint Seeks Adoption of Aggregate Performance Reporting

The mailmaint working group called for adoption of draft-brotman-aggregate-performance-reporting-01, ending 8 October 2026. Responses included support together with technical concerns about reporting format proliferation. Email maintainers and operators may wish to comment before the deadline.