IETF drafts, HPKE standard, and moderation debate

IETF and related lists advanced protocol drafts on email authentication, post-quantum IPsec, and time synchronization while debating formal methods limits and moderator procedures. Hybrid Public Key Encryption reached Proposed Standard status.

CFRG examines ProVerif and Tamarin naming and soundness

Nadim Kobeissi circulated a preprint arguing that ProVerif and Tamarin should be called symbolic protocol analyzers rather than provers and questioning the soundness of their proofs. The CFRG list produced limited discussion of formal methods boundaries. Protocol designers relying on these tools have a stake in how their guarantees are characterized.

DKIM2 sender policy draft separates flags from DMARC

Wei Chuang posted draft-chuang-dkim2-sender-policy-01, which isolates constraint flags from DMARC enforcement and revises alignment rules for DKIM2 forwarding. The ietf-dkim list generated 35 messages from 10 participants on the proposal. Email authentication implementers tracking DKIM2 evolution need the updated policy model.

IETF moderator team seeks input on procedures

The IETF moderator team opened draft procedures for community comment on the mod-discuss list. The resulting 51-message thread mixed procedural feedback with heated exchanges over past actions, tone, and disputes involving DJB. Participants in IETF process governance will watch how the final rules settle.

IPsecme call for adoption of PQC hybrid authentication

The IPsec working group ran a call for adoption of draft-reddy-ipsecme-pqt-hybrid-auth-01. Support appeared alongside technical objections concerning security properties and complexity. Post-quantum migration paths for IPsec depend on whether hybrid authentication designs stabilize.

dnssd weighs mDNS conflict reporting for ULD

The dnssd list discussed mDNS conflict reporting and naming conventions inside the ULD specification. Six participants exchanged 29 messages on the topic. Local service discovery and unique local domain handling are directly affected.

HPKE approved as Proposed Standard

The IESG advanced draft-ietf-hpke-hpke-06 to Proposed Standard, finalizing the HPKE combination of KEM, KDF, and AEAD. The announcement locks in a widely used hybrid public-key encryption construction. Cryptographic protocol implementers now have a stable reference for the primitive.

OAuth AMR values draft under review

Review of draft-skyfire-oauth-amr-values produced pull requests and debate over amr combinations, channel semantics, and a possible amr_details claim. Eight participants contributed 17 messages. Authentication method reference semantics in OAuth tokens remain in flux.

NTPv5 draft-10 changes root-delay format

The NTP working group published draft-ietf-ntp-ntpv5-10. Discussion focused on a root-delay format change that caps maximum round-trip time at roughly 16 seconds and thereby breaks deep-space use cases. Operators of high-latency time synchronization links must evaluate the impact.