Internet and Protocols, 6 November 2026

IETF lists advanced post-quantum transition work alongside authentication, moderation, and timing protocol drafts. Certificate embedding, hybrid signatures, DKIM2 policy, and related reviews dominated the day's technical traffic.

LAMPS draft embeds alternate PQ issuer certificates

A new draft in the LAMPS working group proposes embedding alternate post-quantum issuer certificates to support legacy servers during the Web PKI post-quantum transition. The spasm.ietf.org thread examined the approach in 14 messages from 5 participants. Readers tracking Web PKI migration paths have a concrete mechanism under discussion for dual-issuer operation.

DKIM2 sender policy separates constraints from DMARC

Wei Chuang posted draft-chuang-dkim2-sender-policy-01 on the IETF DKIM list. The draft separates constraint flags from DMARC enforcement and updates alignment rules for DKIM2 forwarding. Eleven participants exchanged 40 messages on the proposal, which matters for operators handling forwarded mail under evolving authentication rules.

Call to rename ProVerif and Tamarin as analyzers

Nadim Kobeissi posted a preprint on the CFRG list arguing that soundness arguments for ProVerif and Tamarin contain gaps and bugs. The preprint proposes calling the tools symbolic protocol analyzers instead of provers. Twenty messages from 10 participants debated the terminology and underlying claims, relevant to anyone relying on these tools for protocol assurance.

CFRG weighs SUF-CMA PQ/T hybrid signatures

CFRG participants discussed whether to scope work on strongly unforgeable PQ/T hybrid signatures that preserve SUF-CMA properties. A poll and thread showed interest tempered by one dissent on migration speed. Fifteen participants contributed 18 messages, giving implementers a signal on possible future hybrid signature guidance.

Moderator team seeks input on RFC9945 procedures

The IETF Moderator Team requested community input on draft procedures implementing RFC9945 moderation rules. The mod-discuss.ietf.org thread generated 68 messages from 20 participants. The exchange shapes how list moderation will be applied across IETF working groups.

OAuth AMR values draft draws review and PRs

Review of draft-skyfire-oauth-amr-values on the OAuth working group list triggered pull requests and debate on amr combinations, channel semantics, and a possible amr_details claim. Eight participants posted 18 messages. The outcome affects how authentication method references are expressed in OAuth deployments.

SIP TLS 1.3 and PQ update draft proposed

An individual draft proposes TLS 1.3 and post-quantum updates for SIP. Working group adoption discussion on sipcore focused on deployment barriers. Eight participants sent 8 messages, highlighting practical obstacles for SIP operators considering the changes.

NTPv5 draft-10 caps root delay and RTT

The NTP working group released draft-ietf-ntp-ntpv5-10. Discussion centered on a root-delay format change that caps maximum RTT at approximately 16 seconds, noted as breaking deep-space use cases. Five participants exchanged 17 messages on the revision and its operational impact.