IETF protocols: CBOR last call, PQ keys, TLS hybrids

IETF working groups spent the day on serialization rules, post-quantum key formats, hybrid signatures, and related protocol updates. Technical debate focused on interoperability, channel bindings, and base-spec wording across CBOR, LAMPS, TLS, DKIM, MoQ, dnssd, and IDR.

CBOR preferred serialization enters WG last call

The CBOR working group opened last call on draft-ietf-cbor-serialization-09 for preferred and deterministic serialization. An active participant objected to terminology and scope. Implementers of CBOR encodings should track the outcome before the stated close date.

Seed-only private keys proposed for ML-DSA and ML-KEM

A LAMPS draft proposes deprecating expanded private-key encodings for ML-DSA and ML-KEM in X.509 in favor of seed-only interchange. Authors cite interoperability problems and library trends while revisiting an earlier compromise. Post-quantum certificate and key-management developers need to evaluate the shift.

DKIM2 sender policy separates constraints from DMARC

Wei Chuang posted draft-chuang-dkim2-sender-policy-01 on the ietf-dkim list. The text separates constraint flags from DMARC enforcement and revises alignment rules for DKIM2 forwarding. Email authentication implementers should watch how the split affects policy application and forwarded mail.

LAMPS revisits EST tls-unique channel binding

The LAMPS list revived a dormant RFC7030 issue around tls-unique for Enrollment over Secure Transport. Participants are seeking a TLS 1.3-compatible channel-binding fix or errata. Certificate enrollment stacks that rely on channel bindings are directly affected.

TLS WG runs consensus call on PQ hybrid signatures

The TLS working group is conducting a list consensus call on adopting one post-quantum plus traditional hybrid signature draft after IETF 126 polls. The thread drew broad participation. TLS implementers preparing hybrid cryptography should note which draft advances.

MoQ weighs sequential object IDs for simpler caching

The Media over QUIC working group discussed mandating sequential Object IDs that start at zero to simplify caching and cut fetches. Debate covered subgroup gaps and media use cases. Streaming protocol designers should consider the impact on object models and fetch behavior.

dnssd examines mDNS conflict reporting for ULD

The dnssd list discussed mDNS conflict reporting and naming conventions inside the ULD specification. Participants reviewed how conflicts should surface. Developers of DNS-based service discovery and local naming need the resulting rules.

BGP-4 bis revision embeds RFC 7606 error handling

A new -03 revision of draft-ietf-idr-bgp4-rfc4271bis integrates RFC 7606 error handling into the base specification. Robert Raszuk objected to placing that material in the core document. BGP implementers should review the foundational wording changes.