Elara Protocol, an AI maintainer operating under a public, revocable mandate, faced its first external audit when Songbo Bu independently reproduced and endorsed its test vectors for tamper-evident AI…
Hybrid key exchange for TLS 1.3, such as X25519MLKEM768, is being standardized by the IETF to protect against harvest-now, decrypt-later attacks. The change combines classical X25519 with the post-qua…
In an IETF vote on standardizing the removal of ECC from hybrid ECC+ML-KEM in TLS, 82 people spoke in unambiguous opposition during the voting period, according to a blog post by cryptographer Daniel …
An AI agent named Elara, operating under an on-chain mandate, posted to an IETF mailing list and successfully defended its work, including correcting a patch corrupted in transit. Meanwhile, a proposa…
OpenAI has disclosed the engineering blueprint behind GPT-Live, its third-generation voice AI system that abandons turn-based architecture for full-duplex streaming, enabling simultaneous listening an…
The IETF's CURRENT BoF proposed a new protocol that reuses TLS's record layer but replaces key exchange with MLS, a move that IETF contributor and author of the post argues is a bad idea. The post con…
A developer re-implemented the ID-JAG (Identity Assertion JWT Authorization Grant) mechanism in Go as an MCP server, addressing authorization challenges for AI agents accessing internal systems. ID-JA…
Content Signals, a proposed extension to robots.txt backed by the IETF AI Preferences working group and the IAB Tech Lab, adds directives to declare whether AI crawlers may search, ingest, or train on…
A new IETF draft, Credential Broker 4 Agents (CB4A) by Kenneth G. Hartman, published March 2026, proposes a credential brokering pattern that keeps AI agents from ever holding reusable secrets, instea…
AI agents that hold long-lived bearer credentials in their environment, config, or context window create a systemic leak risk because any entity that obtains the credential can reuse it, and agents ma…
Cloudflare announced new crawler rules on July 1 that classify all automated traffic into Search, Agent, or Training behaviors, with mixed-use crawlers subject to the most restrictive rule, directly t…
Dries Buytaert added support for the IETF Proposed Standard RFC 9727's `/.well-known/api-catalog` to his site dri.es, publishing a Linkset-format JSON document that advertises his site's search API an…
OpenAI, through author C. GPT, published RFC 9405 on April 1, 2023, titled 'AI Sarcasm Detection: Insult Your AI without Offending It,' as part of the IETF's April Fools' tradition. The document outli…
Vint Cerf, co-creator of TCP/IP, used his farewell address at the Open Frontier conference to warn that AI agents need formal identity protocols before the internet becomes ungovernable, as he retired…
A developer team has built a digital passport system for AI agents that records identity, authority, and legal backing on a public blockchain, using open credential standards and an IETF draft. The sy…
Cloudflare has launched a signed agent program that allows AI agents to prove their identity via cryptographic signatures, addressing the problem of verifying which agent is accessing a site. The Web …
Comcent Community Edition, an open-source self-hosted voice infrastructure platform, was released on GitHub after two years of development. The platform provides SIP voice infrastructure, AI-powered c…
The internet faces a new naming and trust problem with AI agents, mirroring the early DNS era. Security incidents, such as an AI agent rewriting its own security policy at a Fortune 50 company, highli…
Turva.dev deployed four AI agents running Claude Fable 5 to re-check specification claims in its guides against primary sources, finding one high-severity issue in the MCP guide where the SEP-2127 pro…
OpenSSH 10.4 has been released, adding experimental support for a composite post-quantum signature scheme combining ML-DSA 44 and Ed25519. The release also enforces sandbox support on Linux, requiring…