Protocols: quantum issuers, attestation disputes, moderation rules

Protocol lists mixed a post-quantum certificate proposal with a formal-methods dispute over early attestation and a large fight over IETF moderation. Mail authentication, MPLS signaling, agent capacity controls, and DNS ANY queries also drew sustained technical argument.

LAMPS draft embeds alternate post-quantum issuer certificates

A new draft on the LAMPS list proposes embedding alternate post-quantum issuer certificates so legacy servers can be supported during the Web PKI transition. Sixteen messages from six participants treated the idea as a compatibility mechanism for servers that are not yet ready for post-quantum issuers. Certificate operators should follow it because issuer validation is on the critical path for that migration.

Formal analysis claims eight critical flaws in early attestation

A post to the Ufmrg list reports that a ProVerif analysis of early attestation implementations exposed eight vulnerabilities rated CVSS 9.1. The work is named EarlyAttestationTschüss (EAT) in the subject line. The eight-message thread among four participants then moved into accusations about AI use and into moderation, so the severity claims did not remain the focus of the discussion.

IETF moderator procedures draw a large review

The IETF Moderator Team asked for community comment on draft procedures. The mod-discuss thread grew to 125 messages from 23 participants and widened into debate over holds on new participants, brigading, and risks to consensus. The exchange matters because those procedures would govern how contentious IETF discussions are handled.

DKIM list weighs DKIM2 against DMARC sender policy

The IETF DKIM list discussed aligning DKIM2 with DMARC sender policy, including modification flags, across 50 messages from 13 participants. Security concerns in the thread centered on forwarding. Mail operators have a stake in the outcome because those flags define how authentication policy treats messages that intermediaries change.

MPLS adoption call debates RSVP-TE and segment routing

The MPLS working group called for adoption of draft-beeram-mpls-rsvp-sr-01, with the call ending 2026-11-17. The thread, 53 messages from 23 participants, debated reuse of SR adjacency SIDs with RSVP-TE and the resulting coexistence issues. Adoption would decide whether that signaling combination becomes a working-group document.

PACE draft on agent capacity management splits bot-auth

An individual draft, PACE, proposes capacity management for agents and was taken up on the web-bot-auth list. Twenty-eight messages from 11 participants turned heated over privacy and AI safety. Sites that already face automated clients have a reason to watch whether capacity limits become a protocol feature.

DNSOP revisits whether ANY queries should be forbidden

A DNSOP thread of 11 messages from six participants argued for a stronger deprecation of QTYPE=ANY than RFC 8482. The direction favored in the discussion is MUST NOT, rather than answering with HINFO. Resolver and authoritative operators should care because that would replace the current response practice with a prohibition.

CFRG asked to review attestation binding analysis

Paper authors asked the Crypto Forum Research Group for a cryptographic review of a formal analysis of binding mechanisms for early attestation, claiming flaws in related drafts. The 21-message thread from seven participants included disputes over the model and accusations that some responses were produced by AI. The request puts the same family of early-attestation claims in front of the group that reviews cryptographic mechanisms.