freenode

← digests

IETF and IRTF work on post-quantum crypto, DNS, and moderation

Internet & Protocols2026-11-04

CFRG advanced post-quantum key encapsulation and hybrid signature discussions while DNSOP examined DO-bit handling and a new UTXO resource record type. Parallel threads covered MPLS adoption, DKIM2 policy, IETF moderator procedures, and mDNS conflict reporting.

CFRG opens adoption call for PQ KEM security considerations

The Crypto Forum Research Group issued a call for adoption covering post-quantum KEM security considerations, including a common document together with ML-KEM and FrodoKEM drafts. Twenty-one messages from 19 participants showed broad support. The work will shape how implementers evaluate security properties of forthcoming quantum-resistant key encapsulation mechanisms.

DNSOP draft would restrict DO bit to validating resolvers

A draft proposing that the DO bit be set only by validating resolvers, intended to ease post-quantum DNSSEC deployment, drew 15 messages from 10 participants. Multiple DNS experts opposed the change and instead favored migration toward TCP or QUIC. The debate underscores differing views on how to accommodate larger signatures without altering core DNS flag semantics.

MPLS adoption call for RSVP-SR draft meets architectural objection

The MPLS working group opened a call for adoption of draft-beeram-mpls-rsvp-sr-01 that ends 2026-11-17. Fifteen messages from 14 participants mixed support with a strong architectural objection from Zafar Ali concerning segment-routing per-flow state rules. Operators combining RSVP-TE with segment routing have a direct stake in the outcome.

DNSOP reviews UTXO RRTYPE application for binary data

DNSOP discussed an application for a new RRTYPE that would carry opaque or CBOR binary data containing UTXO references. Twenty-five messages from 12 participants debated whether the design should remain generic or become purpose-specific. The decision will affect how blockchain-related identifiers can be published inside the DNS.

DKIM2 sender policy draft separates constraints from DMARC

Wei Chuang posted draft-chuang-dkim2-sender-policy-01, which separates constraint flags from DMARC enforcement and revises alignment rules for DKIM2 forwarding. The ietf-dkim list generated 37 messages from 10 participants. Email authentication developers need to track the proposed changes to sender-policy handling under DKIM2.

IETF moderator team seeks input on draft procedures

The IETF moderator team invited community comment on draft procedures through the mod-discuss list. Fifty-seven messages from 17 participants produced heated debate over past actions, tone, and disputes involving DJB. The thread will influence how the IETF structures future moderation practices.

CFRG considers work on strongly unforgeable PQ/T hybrid signatures

CFRG examined whether to scope work on SUF-CMA-preserving post-quantum/traditional hybrid signatures, with replies requested by October 30. Fourteen messages from 14 participants indicated interest, tempered by one dissent focused on migration speed. Cryptographers designing hybrid signature schemes will be affected by any resulting work item.

dnssd discusses mDNS conflict reporting for ULD

The dnssd working group list examined mDNS conflict reporting and naming conventions inside the ULD specification. Thirty messages from six participants addressed the proposal. Service-discovery implementers should watch refinements to conflict handling in multicast DNS environments.