CFRG adoption calls and IETF protocol advances

CFRG opened adoption calls on zero-knowledge proofs and post-quantum KEM guidance while IPsec, DNSOP, TLS, and SEAT groups debated hybrid authentication, new DNS records, and attested TLS properties. The IESG also advanced HTTP CONNECT proxying to Proposed Standard.

CFRG opens adoption call for Longfellow ZK

The Crypto Forum Research Group opened a two-week call for adoption of draft-google-cfrg-libzk-03, known as Longfellow ZK. Multiple implementers voiced support in a thread with 15 participants. Developers working on zero-knowledge proofs have a concrete draft under active consideration for group adoption.

CFRG calls for adoption of PQ KEM security considerations

CFRG opened an adoption call for post-quantum KEM security considerations covering a common document plus ML-KEM and FrodoKEM drafts. The discussion drew broad support from 19 participants. Implementers of post-quantum key encapsulation gain a shared reference for security analysis if the call succeeds.

IPsec WG weighs hybrid PQC authentication draft

The IPsec Working Group ran a call for adoption of draft-reddy-ipsecme-pqt-hybrid-auth-01 on post-quantum hybrid authentication, ending 2026-10-28. Support appeared alongside technical objections on security properties and complexity among 15 participants. Operators deploying IPsec face design trade-offs that could affect complexity and claimed guarantees.

DNSOP debates UTXO resource record application

DNSOP discussed an RRTYPE application for opaque or CBOR binary data that carries UTXO references. Participants examined generic versus purpose-specific design across 22 messages from 10 people. The outcome will shape how blockchain-related data can be published through DNS.

TLS list reviews PQ trust-anchor migration header

A new draft-sheffer-tls-pq-hsts-00 proposes an HSTS-like HTTP header for post-quantum TLS trust anchor migration. The TLS working group list debated venue and alternatives among 8 participants. Operators planning post-quantum transitions must decide whether a dedicated header or existing mechanisms better serve migration.

SEAT use-cases rewrite sparks security claims debate

A properties rewrite in the SEAT use-cases draft shifted into argument over security claims and attacks between competing attested-TLS drafts. The heated exchange produced 52 messages from 12 participants. Readers tracking attested TLS need to follow how threat models and competing drafts are reconciled.

CFRG asks whether to explore strongly unforgeable hybrid signatures

CFRG debated exploration of SUF-CMA-preserving post-quantum and traditional hybrid signatures, with replies due by October 30. Mixed responses weighed use cases against migration impact among 9 participants. Signature designers must balance stronger unforgeability against simpler hybrid migration paths.

IESG approves template-driven HTTP CONNECT TCP proxying

The IESG approved draft-ietf-httpbis-connect-tcp-17 as a Proposed Standard for template-driven HTTP CONNECT proxying for TCP. The document adds URI Template configuration similar to CONNECT-UDP and CONNECT-IP. Clients and proxies gain a standardized way to configure TCP tunneling through HTTP.