[ippm] draft-ietf-ippm-encrypted-pdmv2
"nalini.elkins@insidethestack.com" <nalini.elkins@insidethestack.com> Wed, 24 June 2026 13:21 UTC
Return-Path: <nalini.elkins@insidethestack.com>
X-Original-To: ippm@mail2.ietf.org
Delivered-To: ippm@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id CFE4010677228 for <ippm@mail2.ietf.org>; Wed, 24 Jun 2026 06:21:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782307264; bh=nRXJmCPbz5aDfu3Ohp63O0AY/T9QNMTQmDHg2OEpoi4=; h=Date:From:To:References:Subject; b=En+GzcHFGU65UqnpiFF4Q/D6Lq5lUxkM5dOY+o8P2CrwLOLnAe4tW9IeP7CP28+jn DsuDzoHbEqLB7Av07KDZGBlnk8V91BCJ8Lna3q0fCQ4rrhhfu+z0WDM9yGr4kMDavv BQCys7GFM2aSpvpm+MC3znapl+NJPNeVCZJ6e7nE=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.894
X-Spam-Level:
X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8FWCyGfD_R4a for <ippm@mail2.ietf.org>; Wed, 24 Jun 2026 06:21:04 -0700 (PDT)
Received: from sonic318-28.consmr.mail.ne1.yahoo.com (sonic318-28.consmr.mail.ne1.yahoo.com [66.163.186.90]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 255A110677221 for <ippm@ietf.org>; Wed, 24 Jun 2026 06:21:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1782307256; bh=nRXJmCPbz5aDfu3Ohp63O0AY/T9QNMTQmDHg2OEpoi4=; h=Date:From:To:References:Subject:From:Subject:Reply-To; b=CXn6lC6PJk/FfY440QbvbpfV6onSc5Fj2NUlSi0LqJD3qe/5HwzwmHYwL60OO5vbqX99dKeg/V9gfXevLe+YJjhklqndF3ZiTtjuxNTy9NRa079aTRfG/cV7MMwvh11FjJGexcddBzXBO+6Srw3eJsd8j0+fwWLQtndyYEj3vAQwotJD7Q8uWp6N9HtVk1MuNLwnB6rPAOAIwW1UA7+UwGnSKw6zdoKBtKmSUImog+A1hlzBmIKaHTRBi1fxEY9u/DMUOCdyG5oX8Nkvapvv7++SDLWOo23quc/4f3sDwYGP9iKR1GROROjc+gKjiO7WP3MFRD17Fj3dSz3Q7YwIxA==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1782307256; bh=Whak/b5t3JGEr39n1Hh3uJsMniEQFeAQZM+vkFmKS3F=; h=X-Sonic-MF:Date:From:To:Subject:From:Subject; b=i5zDCwNF1OW4ykLW5OpIqHnFQUKOAekkeuScRqMriqeDgJFwhSHqTAZm5H8EZW5lbMbvitDWALZCVa4OTUCSG5RmyPU4Z1jXb+gCv7Y0Q1XbPzu52Kg79eppvKBWSo09izpoD/i/baEHOYSeRTbO6AP9iO8PGABnwJ1FDLQ6UN2JX1HY5jjhhYOXVhI2uX/KqvqE91x6tt90dOR2A2QSmWmb6eAS4MZbGQ9aVZFweRWNLQMgLUgMXWWw89iMDwNXf0oeVmQ0qYLqI7/6KrdYn43kw+J/2QezIGbsOybal1JBBeEgFObAD4t5jsieKSwRaqdzBK6/EPLvc2IBP366yQ==
X-YMail-OSG: U83UzY4VM1mKN50JEpMmZgt8C5TmXnSzLIFwpusTBj4fDlgR7iHL6wCKcNgabgH .BscLdEWWcN7pvN82qBoiMbpK0Ttx7nrJzbyBqcFpIQtKid.SlUiBvWIy3fYJoCM30FuHyOPMzQ4 LYQAqiXlWB9a9OK.gMfaZAk_sSsiRjxhqrh9QNxpDZ9BBeRzQI_JPALIk_jQfjvEIBhnKl8AJIJo CJdNSNAlw3zcddrAyQvsP4sMm2S3_0EfJBmXw6CzgWzsogeQy5DnsEHWue.VVh9pR6zZYK2BKmT5 g1hibdJ.xgvRlSdpH47_OaDLmwRPp_iRVosLLkIFhCAirQHwsCdEL56RVLjHjFB.EQyDBZff7FFN _gKL.zscFwUdp5nT7nNFg7E5CQZ3_bpEkurO0NJoViZssyuc699z7Ymh7ErCw4DsN1Yj8dEk2zcn f2E5BWmmYdPvexhBNKKsvIxw0EXd72J1joOzO1IOr3j9fy.xfRYDw4keByEZ8gXJ54.gXpDABdvO ypm6zjIChpT7sKbsUXUFSW1F8Ct1NKlRgjAzmN9mxXbHUrzWfiyTahKqUVcRcrDnPjD26rdVxYWc W4s1HmkaLzG_yFPb5sIdwaXUXQtiSwRPok3zAC90fvnfkBIccvgPc2nXT8UGVsCPOaA7h9MzOlSF xqxNer8f77zToTlUt_P3EWRHmE5M2trOm8PBm2vos8lXudv0LkAa0xVlT4CM7amBv4e7.kg1yjiR lOlabzdZMYpfZhuB5mfG4_lTXTUXHFY4eChM.pErhi2RQZpJZeydLbYRhur7sdBRVsZyfT7x9pwu .DniL.yQMa.FTbO9klvg_PLrowa_JhzCrUoOPU3rKv5rg2g41hQ2YoHLnQBHFq1dFzWuwxLG98DU QLRHhnjDDHxfyTM0sAYnkcQ2ZAcjgyJ6R4lGBmhz_AI6eW9g1ctd3XC9wV27wpl_flKcKM7r0302 V5QkaTQW5ygq8pNl.e3FHLCwQyoTeWY1Y817GD4vJHp99.nmiH5.5EQ5jwp8PDQP39tkFu4_Oveq WXjaTEeH5u0BU2P6syzIkj0v3IwP_.8IbtjlrwYZYfpsGkbn2piLqJK664_L9vldcyfMdjVzku_6 e1lWBWG7_WyvAsRn.42MVbMrclKoxEM2aqOE8uHOTri_r6PokTuSwPBSSoiONOxmv5Hfzd1MzL2o 7Tl6Z7b_Pq9Yzf_pOLiKTb9MxYNg4vcJpx3IJpsyPfHZ3TxqSfrOp0sqMQbTjldujkU9FFys64oa fAiXTSr9k3tRxmL9MxUR.l.kdMBl21YFf.jWCmkqKdTh1UEHwzUThWWrz4o_jxWbhKkOeksTa4Bk pMIsPE0wWqZDWAZSa8RtYLaxkhgl7GpPat6SwCTKFU1bfddcy4Hq2QO.J_ja4hPhcm0COOF5x0_n Un38Y7_Ky94t36Q_QvZyNluMcT5Z1Ipe6uAq6tAqFcIM6feZRXc6TWiP69NDlxa5LQutbOGLPiOt XiKEmX7pRgU36tnxBpB6ZN61Gl2qXkxYFT_Y8mSIg3ikQXRPgiidtcuekbCFJDpLo.gLUvlSOX0Z LPeDDWnXSfaa_6RoHKMFz9i23tKuQTnQi2lLXjXD7dqyUJFoPb6Jh7M1jHA.iGudFkEvQlMS543e kTLeaYBYri.rF0pnUMF9SgMBwW9.31pU2UaBBgNMkx5LODfNNvjDuU6KtTIjNqxDJmJSBodZZakw 84Q95PVMSckmpn03R8q9buDdw7ZIdRjzYkFmgvT7v8Kyer9tiBBAelKLJwTJnUTuFZo5gEXp58VW 4gfEGsrID_UpBoU2GsXBeVDPxvJPwpQ7G8Wq92LRba81AZ7yQArW8Szj3ImEammzyeMYs5bGrxUT d74Ot1QFntc9QVqNP_5dQna3yj_rRpm9_WpWe9YxK.GFqZUg3L6.rFArGtwg.eUkUAHoSSoho2u0 EQhUni_lJumvNgds6Zjnt2TzLhKQwcdzszokvtJ73afYaGHwUm0hUU7HjWy1rzajGK5F16DBnHVT hMfaebl_6AsqaplaI0xgCkDMaEUghqszSB4ibT7llT7iA0gj0R743TIs6dkGBQm_mCrzzMQrNqpZ d9mcmeEpSDhGbht9tSq6pMxdKRzRDfB_YXhl0.khV3k3_hO6PFkVUjsXG9CCCyhE7_myDZZisvQQ oZxju5b_s6ai6r72KKfXepXvBgjHymVECQ6Wd7FvtHPX7wAjG0sklYp2CL_ZogfRMzhQ_sry1dkj djOkCkVEoQmMnNM_zZCMHCgATqLRlUvzD28.EJM1iHpCnYgNO49KUs3SLl4yzqgP4wqomdiRQUUw jKUdQyUBPFH93f2lmFR78op34y2PIJoFwwLIe
X-Sonic-MF: <nalini.elkins@insidethestack.com>
X-Sonic-ID: 877b8fc0-cd9d-440d-a79e-105583918ff1
Received: from sonic.gate.mail.ne1.yahoo.com by sonic318.consmr.mail.ne1.yahoo.com with HTTP; Wed, 24 Jun 2026 13:20:56 +0000
Date: Wed, 24 Jun 2026 13:20:54 +0000
From: "nalini.elkins@insidethestack.com" <nalini.elkins@insidethestack.com>
To: Ippm <ippm@ietf.org>
Message-ID: <486162233.1602733.1782307254333@mail.yahoo.com>
References: <486162233.1602733.1782307254333.ref@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_1602732_815077133.1782307254332"
X-Mailer: WebService/1.1.26016 YMailNorrin
Message-ID-Hash: VA7KSFLRV3BXJKG5M3HM3W6VRYAH7SJK
X-Message-ID-Hash: VA7KSFLRV3BXJKG5M3HM3W6VRYAH7SJK
X-MailFrom: nalini.elkins@insidethestack.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ippm.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [ippm] draft-ietf-ippm-encrypted-pdmv2
List-Id: IETF IP Performance Metrics Working Group <ippm.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ippm/Y8j1UkQvMVtwe6KLrgbabrmlln0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ippm>
List-Help: <mailto:ippm-request@ietf.org?subject=help>
List-Owner: <mailto:ippm-owner@ietf.org>
List-Post: <mailto:ippm@ietf.org>
List-Subscribe: <mailto:ippm-join@ietf.org>
List-Unsubscribe: <mailto:ippm-leave@ietf.org>
IPPM, We have substantially revised the draft to clarify that PDMv2 uses a registration-first security model. The document no longer attempts to specify inline cryptographic negotiation, HPKE processing, AEAD tag placement, nonce construction, or cipher/KDF selection. Those topics are now explicitly out of scope. Instead, the draft specifies the PDMv2 semantics, header structure, registration roles, operational model, security considerations, and an illustrative RADIUS/EAP-based registration example. This also addresses the earlier concerns about layering and TLS key reuse: PDMv2 operates at the IPv6 layer, applies across TCP, UDP, ICMP, QUIC, and other upper-layer protocols, and does not reuse transport-layer session keys. We also clarified that PDMv2 is distinct from RFC 8250 PDM and requests a new IPv6 Destination Option allocation. I will reach out to the previous reviewers to address their comments. Thanks, Chief Technology OfficerOutside the Stacks, Inc.https://www.outsidethestacks.com Chief Operating OfficerIndustry Network Technology Councilhttps://www.industrynetcouncil.org
- [ippm] draft-ietf-ippm-encrypted-pdmv2 nalini.elkins@insidethestack.com