Internet and Protocols: 2026-11-07

CFRG and IETF lists saw debate on protocol analysis tools, a new hybrid signature standard, and email authentication proposals. Parallel threads addressed post-quantum hybrids, ASN.1 consistency, ATProto typing, and moderation process drafts.

Naming Dispute Over Symbolic Protocol Analyzers

Nadim Kobeissi opened a CFRG thread arguing that ProVerif and Tamarin should not be called provers, citing limits in their soundness claims. The 26-message exchange among 12 participants grew heated and shifted into a personal dispute involving attestation formal analysis and related CVEs. Protocol engineers relying on these tools for security proofs have a stake in how their guarantees are described and trusted.

RFC 10073 Defines Composite ML-DSA for X.509

IETF announced RFC 10073 as a Proposed Standard specifying composite module-lattice-based digital signature algorithm schemes paired with classical signatures for X.509 public key infrastructure. The document standardizes hybrid constructions intended for gradual post-quantum migration. Operators of PKI systems gain a concrete reference for deploying mixed classical and lattice-based signatures.

DKIM2 and DMARC Policy Alignment Talks

The IETF DKIM working group examined a DKIM2 and DMARC sender policy proposal focused on modification flags and forwarding security. Forty-four messages from 12 participants weighed how senders might declare acceptable changes while preserving authentication. Mail system developers tracking authentication evolution need to follow the security trade-offs around legitimate forwarding.

CFRG Considers Strongly Unforgeable PQ/T Hybrids

CFRG discussed whether to take on work defining PQ/T hybrid signatures that preserve strong unforgeability under chosen-message attack, with replies requested by late October. Nineteen messages from 15 participants showed majority interest tempered by one dissent on migration timelines. Cryptographers preparing hybrid designs should watch the scoping decision for impact on signature properties.

Errata on RFC 9939 Sparks ASN.1 Tooling Debate

A technical errata report against RFC 9939 prompted LAMPS discussion of ASN.1 CONTENT-TYPE syntax consistency. Ten messages from seven participants called for better module registries and tooling to avoid similar issues. Implementers of certificate and CMS structures benefit from clearer ASN.1 conventions and supporting infrastructure.

ATProto Agrees on Unified Number Type

The ATP list reached broad consensus on supporting a single number type aligned with JSON for the ATProto data model. Fourteen messages from eight participants summarized float handling and settled on the simpler approach. Developers building on ATProtocol gain a clearer numeric representation that matches common JSON practice.

IETF Moderator Procedures Open for Input

The Moderator Team posted draft procedures implementing RFC 9945 rules and invited community comment on the mod-discuss list. Sixty-nine messages from 20 participants reviewed the proposed workflow. Participants in IETF processes have an interest in how moderation will be applied under the new framework.

DKIM2 Draft on Sender-Specified Modifications

A new individual draft proposed sender-declared benign modifications for DKIM2, including removals and per-MIME-part hashing. Eleven messages from seven participants on the DKIM list examined the approach. Email authentication designers evaluating forwarding-friendly signatures should note the proposed control flags.