DKIM post-quantum plans, agent verifier evidence, RFC 4086 bis

IETF lists spent the day on post-quantum mail signatures, agent protocol evidence rules, and a refresh of long-standing randomness guidance. The heaviest traffic stayed on DKIM transition mechanics, with lighter but concrete progress on two individual drafts.

DKIM2 post-quantum signature choices

The IETF DKIM list examined a PQC threat model statement covering ML-DSA algorithm choices, hybrid constructions, and OR versus AND rules for transitioning to DKIM2 post-quantum signatures. Participants weighed how receivers should treat mixed classical and PQC signatures during rollout. The discussion matters because DKIM underpins mail authentication, and an unclear transition could leave operators unable to adopt stronger cryptography without breaking existing verification.

AgentProto verifier evidence draft advances

An individual draft on verifier exercise and completeness evidence prompted scope discussion spanning the AgentProto and AUDIT lists. Authors applied the emerging rules to their own specifications and posted a -01 revision. Clearer evidence requirements help protocol designers show that verifiers actually check what the specification claims, reducing gaps between written rules and deployed behavior.

RFC 4086 bis seeks AD-sponsored path

Authors published draft-rsalz-4086bis-00, an update to RFC 4086 on randomness requirements, and asked the DISPATCH working group to advance it as an AD-sponsored document. The original RFC remains a common reference for secure random number generation across IETF protocols. A maintained successor would give implementers current guidance without forcing a full working-group reboot.