IETF Logo Mail Archive

[Gen-art] Re: Genart last call review of draft-ietf-tls-mldsa-03

Bas Westerbaan <bas@cloudflare.com> Tue, 09 June 2026 11:46 UTC

Return-Path: <bas@cloudflare.com>
X-Original-To: gen-art@mail2.ietf.org
Delivered-To: gen-art@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id E7E9CFDFBD21 for <gen-art@mail2.ietf.org>; Tue, 9 Jun 2026 04:46:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1781005574; bh=rKnImOEoH5cCdZ+niTdoTaqUbC/LQ7GffBSnFJxUSQI=; h=From:Date:Subject:To:Cc; b=xY/LxV7k1TCLyE61y862ln97XVdzM9TP6aOdxUFhqtU0alk4O5qR4/NR1kEAfjM+I vQSPU5e8vItBud0r1v1YAl1WaYGB/0sjlzP7Xk0BnED+kHvL+C1KtGHpMckzuXCPkS +MPxouzz4bT9aosIGduEUFH0C9EmiRr89/5YZ8ao=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cloudflare.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0-DAdd5nkheR for <gen-art@mail2.ietf.org>; Tue, 9 Jun 2026 04:46:14 -0700 (PDT)
Received: from mail-lj1-x22c.google.com (mail-lj1-x22c.google.com [IPv6:2a00:1450:4864:20::22c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 84653FDFBD15 for <gen-art@ietf.org>; Tue, 9 Jun 2026 04:46:14 -0700 (PDT)
Received: by mail-lj1-x22c.google.com with SMTP id 38308e7fff4ca-39677245e15so51429781fa.1 for <gen-art@ietf.org>; Tue, 09 Jun 2026 04:46:14 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1781005573; cv=none; d=google.com; s=arc-20240605; b=aEZVD1wDfVv0bGlUAjEe9nVWcb7dxq8vBe2ALJpf1L5XQqiyqHjY0uyTPoYeB1Dh+V wjdiUVz9uOvNLzcKmF6tmPdv66kQTCqowyTGEZDApPnjZyBxhODw+74DxLUrPEGyY095 WOVLWoEPPwdrkkelFHSNN+rv9SWMQY1xkdHtRkSbFUYJi5aqQUilNoCCo4uHyCh3dKUs TDxkxb1taKz3py3uOSriSlmbPbai9+VbRS+jOGDiSZhKxXV9NrvXLMJ2ZzF2v2vUxWLP i6ri9jmiWAAv1jmSG79rAjyVJCjijUCiY5D/9r0oKi7TCSfzRNEky/lbVtk1xHjU7NPM PxTA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:mime-version:dkim-signature; bh=cHyotUUwKvzlIQ9Po/FoQw/h68JS5aqiA5stwiwCeo4=; fh=r0WQEZVNxKLetFaLB9tJlhV9DM4GxSehtI84v78WOXk=; b=O8zk92ymgVoNVdrcACESxo16+LgRCMRTXZTCZeySi6JnYQs0Fn5XlHZ7jgN0cUCHx6 Bi3YnsKnJeGVFQ3ed6XNM93fPaCoCQuDM00pKNqzKMwfJULh3U7bI6OZogv+k1CUhov0 jzgUoYp86s4lgDarCIfvQVtqe9ScVwJrkkZPnyJc9HjPwfucSzdz+AOAr/aJGkD1C9lo ybEqCvSY6bIpYVLL4Tmcdhq7sciXnXswgkO3j638Lda30rgpge6YZgGA6tYMSREbX1P9 /V5LuxmwnsEOF9nukoMPpbLdcc4Kq0wN/FeApmSprKGT1fYOMXUNyajtJjkbol7Bclel J/ug==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudflare.com; s=google09082023; t=1781005573; x=1781610373; darn=ietf.org; h=cc:to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=cHyotUUwKvzlIQ9Po/FoQw/h68JS5aqiA5stwiwCeo4=; b=WiMHqDAJdDE+oWt0ZU1UXDMuXpp/jdg4I86R16M5FYbPHH/sRI+QBUaZepTmWKnYKK BQo97RY3OQZk5wi1wiKCEGdMthjXKp2OklTgC5OX8II3XdsJ7/Yi9NNPZggjNJGX4Tvm sbydVRF3CSh+8y1Nctya4AaHbT2BF3zsyyMYbFstt2FgxG/PThYf2r5Zz7E34bzIaATd xtsh3ws1bcd7wOZEF0smYmI/Q8bq5uubyNVAE5vmBogjumfSHfeHxn1v+vHV4Elvtf9w TLR5dV/Z2naLXaWKFXQ2WknD+WJ0pGBnE1ks6phKrP+Bzbh/WcZdEiBaBEPMtwwUdPEc 51cQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781005573; x=1781610373; h=cc:to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=cHyotUUwKvzlIQ9Po/FoQw/h68JS5aqiA5stwiwCeo4=; b=RMw1Qa7cp2f6uF7yAjfrFlOIQ0OlEq//kZjMa0UWGpgPhLFz5nVMG3PcsBKLUtDR8k h90aBxi+iYtonwXKNzCKp+CgqBbYELZV1qQJiCoQ3kgWUOK21Q8HStH3pNdl3p1Fgu4l 0M2Cbcq5jFf2Nmk33x3wa3RNUHJFtmRR03HkUOMIYGvjTXXQsifoJkaxHP21Aj1kukV6 t5J3uwoMHM41i5fl95kfCbcjxS7p89L0lR0w3J5tUSfhk69qERL7rM4sLkuIvT9D56L3 lJ8nMHlMeHkTiILYwLkE2Vdx/3OIfPI9ZjAWO/i12RXm6ovvVOfE6EDbB70TxqQUZ1lq gH7A==
X-Forwarded-Encrypted: i=1; AFNElJ9whSL122kXCSVzIubdvhY8eafcHj+nMityPR0PmzsULp0sxFDWhLh8q28IzUejDoi1JYmrRfLQ@ietf.org
X-Gm-Message-State: AOJu0YxA2LOXeFBEkQ3ZPjy1hGhZV3wdOr9FrIuUD9ldMYxL/0Bz6LOZ pqrLnxWqzbobuMyj44p7GoshWfXjsBjRe+F1zTiu4VUJ8WkBVpIdN4hpTIYp8cIH2X7YlkbXADM F+wTPlyYVoTSX3XeNDiY8ue5v22oTZxEVvGJywOKty1p/pEWsFSlI7BDXpbhv
X-Gm-Gg: Acq92OEooABZQPtjwhZN7zGvCMIMSZY+wnShhu6Jga2AKnxVsxRRTeIhNirv+xVrLc/ 3bvAb13tNn+BSbU8lSdtvJAo9jQsZSzhgO0w/apsHfA9CgOiZlGI8aSz3E1P32vV2lB4EoAywZF lzC+81+kBG3hrNz4XEEsqAVGPQta44rI7ZTziP5G/anS/Skz/wPSZsrDCOhkMqGwAQwceoS2Dq+ KOFSjXOR0ETIqTY03FwXZwmG+HbkHHG6OUAk2F9FGvTwgq9QxfpSEr30+mcroPAw6mzV9XNvYck GhDdGWCxPDW4Zo8KmukxMVhp9iwIZ1wFOIkuoGR7K+YO75lEYNN9WVoocGcEQ+nfv60M
X-Received: by 2002:a2e:bc0b:0:b0:396:a041:6101 with SMTP id 38308e7fff4ca-396d0977d22mr51539341fa.14.1781005572955; Tue, 09 Jun 2026 04:46:12 -0700 (PDT)
MIME-Version: 1.0
From: Bas Westerbaan <bas@cloudflare.com>
Date: Tue, 09 Jun 2026 13:46:00 +0200
X-Gm-Features: AVVi8Cc4SlCRx1hbQHRQYgX3OX8iwhBsIFe1hdOSE8JNbhv0vBkv77kee1Yte_Y
Message-ID: <CAMjbhoXsZsgeLJi4ct_nWduA4ytAtLTg2HjT8D2T10iKvO+3Og@mail.gmail.com>
To: jmh@joelhalpern.com
Content-Type: multipart/alternative; boundary="0000000000008506b30653d0acde"
Message-ID-Hash: HZCQEMJTVKIZZO7SWKXA4TRA3OY7UNQ2
X-Message-ID-Hash: HZCQEMJTVKIZZO7SWKXA4TRA3OY7UNQ2
X-MailFrom: bas@cloudflare.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-gen-art.ietf.org-0; header-match-gen-art.ietf.org-1; header-match-gen-art.ietf.org-2; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "<tls@ietf.org>" <tls@ietf.org>, gen-art@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Gen-art] Re: Genart last call review of draft-ietf-tls-mldsa-03
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/gen-art/GYfgcjP8addAuwksN32TYnUU4jY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Owner: <mailto:gen-art-owner@ietf.org>
List-Post: <mailto:gen-art@ietf.org>
List-Subscribe: <mailto:gen-art-join@ietf.org>
List-Unsubscribe: <mailto:gen-art-leave@ietf.org>

Hi Joel,

Thanks for the review.

Minor issues: The security considerations section seems remarkably light.
> It
> may be correct.
>

Original intention was to keep the security considerations specific to
anything particular about the use of ML-DSA in TLS and refer to existing
documents (FIPS 204, RFC 8446) for generally applicable considerations.

The working group has certainly thought a lot more about it then these
short few words might suggest. Among others, the WG discussed several
changes: whether to mention composites (hybrids); whether to discuss hedged
vs deterministic signing; and whether to repeat general guidance.  My guess
is that only https://github.com/tlswg/tls-mldsa/pull/36 will have WG
support.

Best,

Bas

v2.46.0 | Report a Bug | By Email | System Status