Summary

  • The IETF Datatracker records draft-ietf-ippm-encrypted-pdmv2-16 as an IPPM Working Group Internet-Draft updated on 16 August 2026 and intended for Standards Track consideration.
  • The draft proposes a register-first revision of RFC 8250’s IPv6 PDM option: entities authenticate and gain authorization before shared-secret diagnostic information is used.

The Datatracker entry records version -16; the Internet-Draft text describes why the old PDM serial and timing fields can expose endpoint or network-operational characteristics. That is a narrow but consequential reframing: performance diagnostics are not neutral simply because they are useful to an operator.

The draft’s proposed sequence is register first, then diagnose. Registration is intended to authenticate participating devices, authorize access, and establish the shared secrets used for protected measurement information. The proposal is IPv6-layer work and says middle devices need not decrypt or interpret its content; it also describes use above protocols including TCP, UDP, ICMP and QUIC.

The security boundary should not be exaggerated. The document does not choose cryptographic algorithms, define key derivation, or prescribe negotiation. It does not establish a vendor implementation, a deployment, or an interoperability result. It remains an Internet-Draft, with an expiry date of 17 February 2027 unless it advances.