NTP leap seconds, ISOC appeal, and PQC drafts

IETF lists saw a proposal to strip leap-second support from NTPv5 after a BIPM tolerance change, an ISOC board denial of a standards-process appeal, and formal-analysis findings of critical attestation flaws. Parallel threads advanced fine-grained OAuth authorization, post-quantum IPsec and DKIM work, agent use-case scoping, and workload identity interest.

NTPv5 proposal to drop leap seconds

The NTP list examined a proposal to remove leap-second handling and the leap indicator from the NTPv5 draft. The suggestion follows BIPM widening the UTC-UT1 tolerance to one hour. Time-protocol implementers should watch whether the simplification proceeds and how it affects clock discipline.

ISOC Board denies Bernstein antitrust appeal

The Internet Society Board of Trustees denied Daniel J. Bernstein's appeal claiming the IETF standards process violates antitrust rules. The outcome was posted to the IETF announce list. The decision closes a governance challenge to how IETF produces standards.

Critical flaws found in early attestation

A UfMRG post reported eight critical-severity vulnerabilities scored CVSS 9.1, discovered through ProVerif formal analysis of early attestation implementations under the EarlyAttestationTschüss (EAT) label. Attestation deployers need to determine whether their stacks are affected by the newly disclosed issues.

OAuth interest call on fine-grained authorization

The OAuth working group opened a call for interest in fine-grained authorization for AI agents, following IETF 126 and pointing to drafts on missions and RAR remediation. The thread generated 43 messages from 12 participants. Developers extending OAuth for agent scenarios have a chance to shape the work's scope.

IPsec adoption call for PQC hybrid authentication

The IPsec working group started a call for adoption of draft-reddy-ipsecme-pqt-hybrid-auth-01 that ends 2026-10-28. Responses mixed support with technical objections on security properties and complexity. Parties concerned with post-quantum IPsec authentication have a brief window to comment.

DKIM debates PQC signature transitions

The IETF DKIM list discussed ML-DSA algorithm choices, hybrid constructions, and OR/AND transition rules for DKIM2 post-quantum signatures in light of a PQC threat-model statement. Thirty-nine messages from eight participants explored the options. Email authentication maintainers should track how the transition rules settle.

Agentproto narrows use-case document candidates

The agentproto working group narrowed candidate drafts for a use-cases document on cross-domain agent delegation and recovery. Discussion of existing practice, use cases, and deployment models produced 30 messages from 12 participants. Builders of multi-domain agent systems have a stake in the emerging framing.

WIMSE gauges interest in third-party workload identity

WIMSE working group members gave positive responses to a request for expression of interest in workload identification for third parties without per-workload registration. Eighteen participants joined the thread. Operators of workload identity systems may find the direction relevant to federation without heavy registration overhead.