IESG PR-action, OAuth PoP adoption, SSH compression, MASQUE

The IESG approved a posting-rights suspension under RFC 3683 while OAuth, SSH, MOQ, and MASQUE groups advanced adoption, scoping, and standards actions. Security reviews and list disputes over participation rounded out the day's IETF traffic.

IESG approves PR-action suspending Ken Kubota

The IESG approved an RFC 3683 PR-action that suspends Ken Kubota's posting rights on the ietf, tls, and related mailing lists after Last Call. The governance step follows formal process for disruptive list behavior. List moderators and participants tracking enforcement norms will note the completed action.

OAuth WG call for adoption of HTTP Message Signatures PoP

The OAuth working group opened a call for adoption of a draft defining OAuth Proof of Possession tokens with HTTP Message Signatures. Roughly fifteen of the seventeen participants voiced support while raising comparison points against DPoP. Adoption would set the path for an alternative to bearer tokens in the OAuth suite.

SSH group debates scope of compression deprecation

The SSH working group discussed the scope of a draft that would deprecate transport-layer compression, weighing a zlib-only limit against removal of all compression after a recent security paper. Seven participants exchanged nineteen messages on the proposal. The choice directly affects remaining SSH implementations that still negotiate compression.

Heated exchange over NSA-linked participation and TLS concerns

Ken Kubota accused participants with NSA links of undermining Daniel Bernstein's cryptographic concerns inside the TLS working group. Chairs repeatedly locked the threads across twenty-five messages from eleven people. The dispute underscores continuing friction over critique and affiliation on IETF discussion lists.

MOQ chairs open consensus call on optional feature placement

MOQ working group chairs started a consensus call on whether optional Top-N and SSTS features should sit in the core draft or move to separate extensions. Twelve participants contributed seventeen messages on the draftification question. The decision will determine how modular the Media over QUIC specifications become.

IPv6 node requirements bis enters WG Last Call

The 6man working group opened Last Call on draft-ietf-6man-rfc8504-bis-04, scheduled to end 2026-10-19. Reviewers supplied routine comments on references and edge cases. The bis refresh updates baseline IPv6 node requirements for implementers.

Secdir review flags issues in SD-JWT VC draft

A Secdir review of draft-ietf-oauth-sd-jwt-vc-19 during IETF Last Call identified security issues. The editor responded with planned pull-request fixes. The findings matter for selective-disclosure JWT verifiable credentials approaching publication.

MASQUE Ethernet frame proxying approved as Proposed Standard

The IETF approved draft-ietf-masque-connect-ethernet-17 as a Proposed Standard for proxying Ethernet frames over HTTP. Two implementations already exist. The action extends the MASQUE framework to layer-2 tunneling scenarios.