Internet and Protocols: attestation flaws, TE disputes, email TLS

Critical vulnerabilities in confidential computing attestation led the day, alongside heated IETF debates on power-aware traffic engineering and SMTP confidentiality requirements. Deep-space addressing drafts and several working-group adoption calls rounded out the activity.

Critical vulnerabilities in attested TLS implementations

Researchers reported three critical-severity vulnerabilities with CVSS scores of 9.0 or higher in confidential computing, affecting two attested-TLS implementations. The findings are tied to the IETF draft on early attestation. Operators and implementers of confidential computing and attested protocols have direct reason to assess exposure.

Challenge to distributed power-aware traffic engineering

Aijun Wang argued that distributed power-aware traffic engineering is impossible during discussion of the draft-many-teas-power-steering adoption call. Authors defended metric-modified CSPF and power-group approaches. The extended TEAS exchange underscores open questions about incorporating power metrics into routing.

Last-call dispute on TLS confidentiality for SMTP

An IETF last-call thread examined Roman's DISCUSS on draft-ietf-emailcore-as concerning mandated TLS confidentiality for SMTP. Participants raised objections grounded in diverse use cases. The outcome will shape the document status and email security baselines.

IPv6 address space draft for celestial bodies

A new merged draft proposes IPv6 address space for celestial bodies and transit craft. Deepspace working-group discussion weighed aggregation architecture against NRO policy considerations. The work targets long-term addressing needs beyond Earth.

Celestial-body registry draft update

An updated draft on a celestial-body registry for deep-space addressing drew working-group comments on external registry integration and use-case scope. Participants examined how such a registry would fit existing numbering arrangements. The proposal remains early but relevant to space networking standards.

Adoption call for aggregate email performance reporting

The mailmaint working group opened a call for adoption of an aggregate email performance reporting draft. Responses mixed support with technical concerns about proliferation of reporting formats. The call closes in early October 2026.

Spying network machines raised on IETF list

A single message on the main IETF list framed spying IoT devices as a growing problem and distinguished read versus write security dimensions. The post opens discussion rather than presenting finished analysis. Readers tracking IoT trust models may take note.

DTN adoption call for BPv7 Echo Service

The DTN working group ran an adoption call for a BPv7 Echo Service draft. Minor debate over service numbers was resolved by deferring assignment to IANA. The call provides a straightforward diagnostic capability for delay-tolerant networks.