OAuth fine-grained auth, SSH compression, and IETF process debates

IETF working groups advanced several protocol proposals and process questions on 2026-10-14, with notable activity around authorization models, transport security, and operational guidance. Discussions spanned OAuth, SSH, OPSAWG, and related mail and calendar efforts.

OAuth WG seeks interest in fine-grained authorization

The OAuth working group issued a call for interest in fine-grained authorization, framed as an IETF 126 follow-up and oriented toward AI agents. Participants referenced existing drafts on missions and RAR remediation. Developers tracking authorization for constrained or agent-driven clients should watch for whether the group adopts new work in this area.

SSH WG scopes deprecation of transport compression

The SSH working group discussed the scope of a draft deprecating transport-layer compression, following security research. Conversation leaned toward full removal rather than a narrower change. Implementers of SSH stacks need to assess impact on interoperability and default configurations if the draft advances.

OPSAWG last-call review debates operational considerations

An IETF last-call Tsvart review of draft-ietf-opsawg-rfc5706bis-09 prompted debate on whether new RFCs should mandate Operational Considerations sections. The exchange involved many participants across the OPSAWG list. Authors and reviewers of future protocol documents may face clearer expectations on operational content if the discussion hardens into guidance.

PLANTS WG weighs adoption of MTC use-cases draft

The PLANTS working group ran a call for adoption of draft-gray-plants-mtc-deploy-use-cases-01, covering non-WebPKI MTC scenarios. Support was mixed, with some participants preferring focus on the core specification first. Parties interested in certificate and trust models outside traditional WebPKI will want the outcome of the adoption decision.

IANA seeks clearer FCFS policy on URI schemes

IANA reported a surge in generic provisional URI scheme registrations under first-come-first-served rules and asked for clearer policy language. The ianabis list examined possible text changes. Protocol designers registering schemes should expect tighter scrutiny of provisional names.

DKIM discussion adds intermediary and header-size notes

Members of the DKIM working group proposed adding a definition of re-originating intermediaries and an operator note on header size limits and Message-Instance growth to the DKIM2 BCP. The thread stayed technical and operator-focused. Mail operators handling large or rewritten messages have a stake in any resulting BCP text.

Mailmaint revisits single-script rule for SMTPUTF8

The mailmaint working group questioned the single-script rule in draft-ietf-mailmaint-smtputf8-syntax-04, citing Japanese name examples. Discussion remained limited in participants but directly affected the draft text. Implementers of internationalized email addresses should track whether the syntax constraints are relaxed.

JMAP Calendars considers localStart and localEnd properties

A late post-last-call suggestion proposed adding localStart and localEnd computed properties to JMAP Calendars CalendarEvent objects. WG support expressed so far was limited. Calendar client and server developers may see a small API extension if the idea gains traction.