Internet and Protocols: 2026-10-20
Post-quantum cryptography proposals led activity across IPsec, DKIM, and DNSOP, while CBOR advanced a serialization draft and agent protocol groups refined use cases and evidence rules. Security review comments and mail syntax debates completed the day's IETF list traffic.
IPsec call for adoption of PQC hybrid authentication
The IPsec working group opened a call for adoption of draft-reddy-ipsecme-pqt-hybrid-auth-01, closing 2026-10-28. Nine messages from seven participants showed support together with technical objections on security properties and complexity. The decision will set how IPsec incorporates hybrid post-quantum authentication.
DKIM PQC threat model and signature transition rules
The IETF DKIM list examined a PQC Threat Model statement covering ML-DSA choices, hybrids, and OR/AND transition rules for DKIM2 PQC signatures. Eight participants exchanged 38 messages on the proposal. Email authentication implementers need clarity on these rules for post-quantum readiness.
DNSOP MTL drafts for post-quantum DNSSEC
DNSOP discussed updates on two MTL drafts for post-quantum DNSSEC in the context of a virtual meeting agenda. Five messages from three participants offered brief technical notes on complexity and benefits. Operators preparing DNSSEC against quantum threats have a direct interest in the direction of this work.
CBOR last call on preferred and deterministic serialization
The CBOR working group ran a last call on draft-ietf-cbor-serialization-09, which defines preferred-plus and deterministic serializations and ended 2026-10-19. Fifteen messages from eight participants produced technical corrections and a profiling debate. Constrained-format implementers should track the final text as the call concludes.
Agentproto use cases and deployment models
The agentproto working group reviewed existing practice, use cases, and deployment models, refining candidate starting drafts on dialog resumption and authorization. Twenty-eight messages from twelve participants advanced the discussion. Early consensus here will shape the scope of agent protocol standards.
Secdir review of SATP core draft
A Secdir reviewer flagged gaps in atomicity guarantees and remote attestation binding for draft-ietf-satp-core-17 during IETF last call. Three messages from three participants recorded the security concerns. Parties following secure asset transfer protocols need to watch how these issues are resolved.
Agentproto verifier evidence draft and scope
An individual draft on verifier exercise and completeness evidence prompted scope discussion between the AgentProto and AUDIT lists. Authors applied the rules to their specifications and posted a -01 revision after ten messages from four participants. The exchange helps define evidence requirements for agent protocols.
Mailmaint single-script rule in SMTPUTF8 syntax
The mailmaint working group questioned the single-script rule in draft-ietf-mailmaint-smtputf8-syntax-04, citing Japanese name examples. Twenty-one messages from five participants examined the proposal. Maintainers of internationalized email systems have a stake in the resulting syntax.