Digests#

USENIX Security '25 (34^th USENIX Security Symposium)

Program source is the expanded technical-sessions schedule (titles, authors, and full abstracts; no PDF/slide/recording links were present in the pasted program text, so no Links field is included below — every write-up is grounded in the abstract only). USENIX Security is enormous (380+ accepted papers plus Enigma industry talks across three days); this is a tight cut toward the PM's stated interests — physical DC/WAN networking, cloud-native networking, network security, and identity/authentication — with most of the program (ML/AI privacy, blockchain internals, mobile-app privacy measurement, hardware fault injection unrelated to networking) left out.

IETF 123 (Madrid)

A standards meeting, so the unit of work is the Internet-Draft, not the session. This cycle's signal is concentrated in three places that map directly onto your interests: workload identity finally cohering into a full WG-adopted stack (WIMSE), the post-quantum migration moving from algorithm definition into deployment mechanics across TLS/PKIX/COSE/JOSE, and datacenter fabric work in NVO3, RIFT, and SAVNET. Selection is from the program; every write-up below is grounded in the draft abstract only (no paper links were available to enrich from), and is flagged as such.

A note on maturity, since it's the whole game in a standards venue: draft-ietf-* means a working group has adopted the work (it carries weight); draft-<author>-* is an individual submission (early, may go nowhere). Where both exist for the same title, the WG copy is the one to track.

AutoCon 3 (Prague) — Operator

A network-automation operator conference. Little here is directly about DC fabrics or identity protocols, but a strong subset is: two unusually candid optical-transport automation stories, a BGP telemetry build, a large-scale datacenter Terraform migration, EVPN service migration at a global telco, and several security/identity-flavored automation sessions. The rest is a clear field-wide shift from "automate operations" toward "design-driven, durable-execution, trustworthy automation" — worth skimming for where the networking discipline is heading.

NSDI '25

A triage of NSDI '25 papers for a PM working on physical DC networking, cloud-native networking, network security, and identity. Picks are grouped into Core, Adjacent, and Wildcard tiers. Links point to the USENIX presentation page for each paper, which carries the open-access PDF (and, where posted, slides and video). The program text supplied did not contain per-item pdf:/video: links, so these URLs were resolved against the public USENIX proceedings; slide/video availability varies by paper.

KubeCon + CloudNativeCon Europe 2025 (London)

A triaged set of sessions for a PM working across physical DC/WAN networking, cloud-native networking, network security, and identity. The published program provides titles, speakers, and abstracts only — no per-session paper/slide/recording links — so every write-up below is grounded in the abstract and is marked accordingly. Sponsor pitches, cloakroom/logistics entries, DEI/community programming, and content-free "we adopted X" talks were dropped. Picks are deliberately tight given the size of the program (500+ sessions across the main conference and ~15 co-located day events).

SREcon25 Americas

Program source is the expanded schedule (titles, speakers, and abstracts; no PDF/slide/recording links were present in the pasted program text, so no Links field is included below — every write-up is grounded in the abstract only). This cycle's program skews heavily toward observability tooling, incident-response process, and organizational/human-factors content, plus a large AI/ML-infrastructure-operations cluster (safe model rollout, ML training governance, AI-assisted ops) — none of which is core to the PM's stated interests. The pick count below is intentionally small: it reflects genuinely thin coverage of DC/WAN networking, cloud-native networking, network security, and identity this cycle, not aggressive filtering of a networking-heavy program.

IETF 122 (Bangkok)

Program source is the datatracker documents API, filtered to a curated set of 26 working groups touching cloud-native networking, network security, and identity. As with any standards meeting, the unit of work is the Internet-Draft, not the session — sessions are thin, drafts carry the substance. All write-ups below are grounded in draft abstracts only; no PDF/page links were available in the program text to enrich from, so treat "What/How" as abstract-level, not full-text analysis. draft-ietf-* means a working group has adopted the work (it carries real weight); a bare draft-<author>-* is an individual submission that may or may not go anywhere — noted per item where it matters. Datatracker links are added per draft (https://datatracker.ietf.org/doc/<name>/) since the program text itself carried no reference links.

The headline this cycle: workload identity (WIMSE) has gone from architecture sketch to a nearly-complete, implementable protocol stack, and it's flanked by matching moves in OAuth (cross-domain identity propagation), attestation (RATS), and supply-chain transparency (SCITT) — all converging on the same underlying problem of proving what is talking to what, and on whose behalf.