IETF PQC formats, hybrid auth, and new WGs

IETF lists advanced post-quantum cryptography key formats, hybrid authentication, and email signatures while forming working groups for AI agent discovery and transposed HTTP. Parallel threads refined Media over QUIC object models, Flowspec content filters, and IPv6 route option handling.

Seed-only private keys for ML-DSA and ML-KEM

A LAMPS draft proposes deprecating expanded ML-DSA and ML-KEM private-key encodings in X.509 in favor of seed-only interchange. Discussion cites interoperability problems and library trends while revisiting an earlier compromise. Certificate and library maintainers face a potential format shift that affects key generation and transport.

IPsec adoption call for PQC hybrid authentication

The IPsec working group opened a call for adoption of draft-reddy-ipsecme-pqt-hybrid-auth-01 ending 2026-10-28. Replies mix support with technical objections on security properties and complexity. Implementers of post-quantum IPsec authentication must weigh the draft's hybrid design trade-offs.

MoQ sequential Object ID and caching changes

The MoQ working group examined a proposal to mandate sequential Object IDs starting at zero to simplify caching and cut fetches. Participants debated subgroup gaps and media use cases. Streaming and caching developers following Media over QUIC may see reduced complexity if the model is adopted.

DAWN working group formed for agent discovery

The IETF announced formation of the Discovery of Agents With Names (DAWN) working group to standardize discovery of AI agents. The charter establishes a dedicated venue for related protocol work. Developers building agent systems gain a formal standards track for naming and discovery mechanisms.

DKIM PQC threat model and signature transitions

The DKIM list debated an updated PQC threat model statement covering ML-DSA algorithm choices, hybrids, and OR versus AND transition rules for DKIM2 signatures. Multiple participants examined practical deployment constraints. Email authentication maintainers need clarity on how post-quantum signatures will be negotiated and phased in.

Flowspec content-filter component adoption call

The IDR working group runs an adoption call through 2026-10-28 for draft-cui-idr-content-filter-flowspec-04, which adds a packet-content filter to FSv2 for DDoS scenarios. Replies are largely supportive aside from a minor numbering correction. Operators seeking finer-grained DDoS filtering gain a candidate extension to evaluate.

IPv6 RIO ambiguity for prefixes longer than /48

An IPv6 thread flags ambiguity in treating Route Information Options longer than /48 when building ULA known-local entries in draft-ietf-6man-rfc6724-update-25, now near AUTH48. Participants seek consistent handling rules. Address-selection implementers require resolution before the document freezes.

Draft charter for PTTH working group

The IESG posted a draft charter for a Protocol for Transposed Transactions over HTTP (ptth) working group and opened a ten-day comment period. The proposed scope reverses conventional HTTP client and server roles. Parties interested in alternative HTTP interaction patterns can review the charter before it advances.