Internet and protocols: PQ hybrids, attestation, moderation

IETF and IRTF lists advanced post-quantum migration mechanics, attestation refinements, and process rules. Technical threads weighed hybrid signatures, geographic claims, DNSSEC options, and moderator procedures.

CFRG scopes SUF-CMA PQ/T hybrid signatures

The CFRG examined whether to explore work on strongly unforgeable hybrid post-quantum and traditional signatures that preserve SUF-CMA properties. A poll and thread among 15 participants showed interest, with one dissent focused on migration speed. Cryptographic protocol designers should track the scoping outcome because it will shape hybrid constructions used in standards.

RATS adoption call for geographic attestation results

The RATS working group ran an adoption call for draft-richardson-rats-geographic-results. Roughly 47 of the 50 messages from 15 participants addressed TEE identifiers, VCEK and VLEK handling, and cloud measurements. Adoption would let remote attestation convey geographic claims useful to cloud and confidential-computing deployments.

Naming dispute over ProVerif and Tamarin

Nadim Kobeissi circulated a preprint arguing that soundness arguments for ProVerif and Tamarin contain gaps and bugs, and proposing they be labeled symbolic protocol analyzers rather than provers. The CFRG thread produced 17 messages from 10 participants. Tool users and protocol analysts may need to adjust how much weight they give to verification claims from these systems.

TLS draft for PQ trust-anchor signaling

A new individual draft, draft-sheffer-tls-pq-hsts-00, proposes an HSTS-style HTTP header to support post-quantum TLS trust-anchor migration. The TLS working group list debated venue choice and alternative approaches across 16 messages from 9 participants. Operators preparing PQ transitions should watch whether header-based signaling gains traction.

IETF moderator procedures opened for input

The IETF moderator team requested community feedback on draft procedures. The mod-discuss thread of 61 messages from 18 participants included heated exchanges over past actions, tone, and disputes involving DJB. Participants in IETF governance will want to see how the final rules settle after the input period.

DNSOP draft on DO bit faces opposition

Draft-wagope-dnsop-do-bit proposes limiting the DO bit to validating resolvers as a way to ease post-quantum DNSSEC. Multiple DNS experts on the DNSOP list opposed the change, preferring migration to TCP or QUIC, across 16 messages from 11 participants. DNS operators facing PQC DNSSEC should note the preference for transport upgrades over alterations to bit semantics.

SNAC draft tightens neighbor-advertisement rules

The SNAC working group agreed to require the Router flag in neighbor advertisements with a MUST and to mention NUD in draft-ietf-snac-simple before IESG review. The short thread comprised 7 messages from 4 participants. Implementers of simple networking automatic configuration need the clarified normative text.

NTPv5 draft-10 changes root-delay format

The NTP working group published draft-ietf-ntp-ntpv5-10. Discussion among 5 participants examined a root-delay format change that caps maximum RTT at roughly 16 seconds and was noted as breaking deep-space use cases. Operators of time protocols over long-delay links should assess the format impact.