Two independent implementations of the Correctover Conformance Shape (CCS) specification, an IETF Internet-Draft defining a runtime verification framework for AI agent tool calls, have achieved 14/14 …
An engineer's blog post argues that AI agent protocols like MCP and A2A fail to record human judgment in approval workflows, citing a paper by Kang and Diponegoro that scores five protocols against go…
SAML 2.0 handles authentication while OAuth 2.0 handles authorization, and choosing the wrong one leads to brittle integrations and audit findings, according to a guide on the differences. The guide n…
Elara Protocol, an AI maintainer operating under a public, revocable mandate, faced its first external audit when Songbo Bu independently reproduced and endorsed its test vectors for tamper-evident AI…
Hybrid key exchange for TLS 1.3, such as X25519MLKEM768, is being standardized by the IETF to protect against harvest-now, decrypt-later attacks. The change combines classical X25519 with the post-qua…
In an IETF vote on standardizing the removal of ECC from hybrid ECC+ML-KEM in TLS, 82 people spoke in unambiguous opposition during the voting period, according to a blog post by cryptographer Daniel …
An AI agent named Elara, operating under an on-chain mandate, posted to an IETF mailing list and successfully defended its work, including correcting a patch corrupted in transit. Meanwhile, a proposa…
OpenAI has disclosed the engineering blueprint behind GPT-Live, its third-generation voice AI system that abandons turn-based architecture for full-duplex streaming, enabling simultaneous listening an…
The IETF's CURRENT BoF proposed a new protocol that reuses TLS's record layer but replaces key exchange with MLS, a move that IETF contributor and author of the post argues is a bad idea. The post con…
A developer re-implemented the ID-JAG (Identity Assertion JWT Authorization Grant) mechanism in Go as an MCP server, addressing authorization challenges for AI agents accessing internal systems. ID-JA…
Content Signals, a proposed extension to robots.txt backed by the IETF AI Preferences working group and the IAB Tech Lab, adds directives to declare whether AI crawlers may search, ingest, or train on…
A new IETF draft, Credential Broker 4 Agents (CB4A) by Kenneth G. Hartman, published March 2026, proposes a credential brokering pattern that keeps AI agents from ever holding reusable secrets, instea…
AI agents that hold long-lived bearer credentials in their environment, config, or context window create a systemic leak risk because any entity that obtains the credential can reuse it, and agents ma…
Cloudflare announced new crawler rules on July 1 that classify all automated traffic into Search, Agent, or Training behaviors, with mixed-use crawlers subject to the most restrictive rule, directly t…
Dries Buytaert added support for the IETF Proposed Standard RFC 9727's `/.well-known/api-catalog` to his site dri.es, publishing a Linkset-format JSON document that advertises his site's search API an…
OpenAI, through author C. GPT, published RFC 9405 on April 1, 2023, titled 'AI Sarcasm Detection: Insult Your AI without Offending It,' as part of the IETF's April Fools' tradition. The document outli…
Vint Cerf, co-creator of TCP/IP, used his farewell address at the Open Frontier conference to warn that AI agents need formal identity protocols before the internet becomes ungovernable, as he retired…
A developer team has built a digital passport system for AI agents that records identity, authority, and legal backing on a public blockchain, using open credential standards and an IETF draft. The sy…
Cloudflare has launched a signed agent program that allows AI agents to prove their identity via cryptographic signatures, addressing the problem of verifying which agent is accessing a site. The Web …
Comcent Community Edition, an open-source self-hosted voice infrastructure platform, was released on GitHub after two years of development. The platform provides SIP voice infrastructure, AI-powered c…