IETF Logo Mail Archive

[km-fs-pcs] MLS encrypted in TLS

Carlos Aguilar Melchor <carlos.aguilar.1998@polytechnique.org> Thu, 18 June 2026 14:28 UTC

Return-Path: <carlos.aguilar.1998@polytechnique.org>
X-Original-To: km-fs-pcs@mail2.ietf.org
Delivered-To: km-fs-pcs@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 98E8C1036ADD9 for <km-fs-pcs@mail2.ietf.org>; Thu, 18 Jun 2026 07:28:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1781792927; bh=LgHyUsX1b7qXSRPjmnwnVbuY53uEb5xWPRD6V8zTa7I=; h=From:Date:Subject:To; b=nhnNT+KzWvTkqj9l0DdV8AJQbM1GoAf410lnfIWHDHDHfaOOZXhqR0Mty5ZIHEjkG +/ckpnhsfYXfplsxUqTgm3Gh/blvynuOty1Ef+FyoXr9dpgplopMkMFdMC5sReNPxc FrJiKBsuEjiKmBfJSi0FPNDVLoe6RHPckbal//rI=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=polytechnique.org
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7d_sXifq_Wui for <km-fs-pcs@mail2.ietf.org>; Thu, 18 Jun 2026 07:28:46 -0700 (PDT)
Received: from mail-pj1-x1030.google.com (mail-pj1-x1030.google.com [IPv6:2607:f8b0:4864:20::1030]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 97EB81036AB9D for <km-fs-pcs@ietf.org>; Thu, 18 Jun 2026 07:28:23 -0700 (PDT)
Received: by mail-pj1-x1030.google.com with SMTP id 98e67ed59e1d1-36ba706ab46so745651a91.1 for <km-fs-pcs@ietf.org>; Thu, 18 Jun 2026 07:28:23 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1781792902; cv=none; d=google.com; s=arc-20240605; b=KHVcwwgFHEvHgGrnc0LNt6+Wg+chJenAmT9cOERjgUe9Kb1JS7TM2WrPlQyU7tcoSj U+SzmUKkLmftbwCmaFctG9wbC4d4zGYYpIftYqhVJPiuRtrqX3kNh6guiXJhkoqBakmn Py4JqyPQI3ifm7KL+NcHTiN0aG/rFDRUJTNzBiQyHC0zrHvFSO+5oc4jrAKTb0aPE52U 9EbDl3xo6hnGuOvL80J6qlpA8BKpsZm5uPV7E6AQUrvrtL8eBLvgfkNFGA8LhnBHaKBz c3rN11cNXURPZN1Qz8VsLcBQ+5MiwgliGjHRR9Yi719Q2cX3IusMlQa33BM1rQU1Dprv +5ZQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=LgHyUsX1b7qXSRPjmnwnVbuY53uEb5xWPRD6V8zTa7I=; fh=rJcP5I4jlE20NB03xNbmQK80KGmYN28VdA+T0EgDmts=; b=A7b37VWaco9O9UrdJ9mb8yEX8pDWJnRI1gAiQMlonABf0D8OlWBgoUUv/dFGuxjDO6 SjqXjgqp/9E3gMdLD0g8d5gc5oT3KQATG7jq3FJXKbvUM8DqHcaQmhFRltg29hdyun3h Nc+fs+pvetn7PRP8Cb2cuN2HJ04oM5DuWzVXzlZe5m8RdbuoEOzUy/zE7ePj+RBS0wuT JUN5iTDjUg/iuECw40DjXG3kAXhlxa+XfVaZbp2FQ2MZwiA+xGLt63WnR/3qneHRnpCs +wXmWEarxrqH3Bo+J/j4bA8TIxeD79RqEf+hpCbTbYREXj1cmM3o86Ko+24dJo9OHqse DBRw==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=polytechnique.org; s=gapps; t=1781792902; x=1782397702; darn=ietf.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=LgHyUsX1b7qXSRPjmnwnVbuY53uEb5xWPRD6V8zTa7I=; b=ejvmEzA1o8eC6TmcWm9X/R4vhkw3YsA4fvc+unufKvErm7DAehjiycz8O4JLuoy48c edEHSZ1VvPII5fpqNATZSdaYRGpZ+CAb1+/h86K4FKi6Cv7YHVqSvZtmxtCYJUZkBLS2 7bia9hNJ3cucgQmyTqEOr4dL29oX4FVahbilQ=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781792902; x=1782397702; h=to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=LgHyUsX1b7qXSRPjmnwnVbuY53uEb5xWPRD6V8zTa7I=; b=ASR3z7L7JdupIH8glGyWCJrlkYGbdgyndc3yB3nE6OLAWar2hYMhKraiy7T9YICyjI Ztg667E59dDuFrVO3IS0jtfUX8//HNA1FjIHwIpeqN+R+OQqUS4PGhpUVHB3AKR9sy6A yqYFNJdG1Q807rQKUoh1b7eiKZLKYKttQhd5XMNIWcGn55tkhpr++QYQLG4OB8+PGEb6 /+8mTD2e4XU0E/b3eQ9y7ZUgzEEhGV3PMWEHGQvf29ZCPUh2ejkcIWmmUfGxKGxCm+M9 Obz3NtrPq+UrRsrxZvi1lgRUJPul0hsX6cMgPAd61dW0KYybkh7mk1Yo5yd87CXa9aWF QI9g==
X-Gm-Message-State: AOJu0YxpRhYW2Wkn8ylqIJMSAu4m71GcX99tS6MMJO36PZXjGcbam8Ic B9bgmi9qEj2wXrcvt/fpWs2bTO1KBqSpVHAN/hQSg1DOtRHHLeZ+oVnrd35WkiJJv/LDu8rkKJy 2A8CepR6lE5XEENL8qGpR90XQFjxbK2pbw5suhQquzr4vgu8By/6uhiIMNg==
X-Gm-Gg: AfdE7cloZ5GkB2W1iSfC0h8lzHvm4oLronYyGp6dNAgtr+GHRmgMwWwSvw6WhFj9VQF nIF+3t//aidI51+1j/migtiX8wexOmGSzz/sbJNIXdYTv+kky01PbgKougKhaNH+LVTgpyau7Ft Bub+jRFRy3i9x1KuKimFXO2JOGBZP1oIN5ke58/nSfpdgAih6WOH4WIW6fkr52+UVy1Sw/b8qm6 OYQqSSlWKAfHTKf0K/nqctL+/1+uwLl3uL1LTzI82pWWqa8y7agYWnuPvzXb9VfC7auD85b52oC cKkPGlTiq7Mx6uu8scD4dH02j17vlQ==
X-Received: by 2002:a17:90b:560e:b0:36b:79aa:cda4 with SMTP id 98e67ed59e1d1-37c930d5a4amr9064616a91.8.1781792902105; Thu, 18 Jun 2026 07:28:22 -0700 (PDT)
MIME-Version: 1.0
From: Carlos Aguilar Melchor <carlos.aguilar.1998@polytechnique.org>
Date: Thu, 18 Jun 2026 16:28:09 +0200
X-Gm-Features: AVVi8CeQb0YqMy_6S8a6Ek7SpJgz_nZKZSJ_eYHTFJd6T-pkSC2ska0jI0Qh6-s
Message-ID: <CAMYged=M3L89_qTP0VUeeFkNrhcuebiYvroCXQ+00_Pofi2Zdg@mail.gmail.com>
To: "km-fs-pcs@ietf.org" <km-fs-pcs@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000fe5e93065487fc7c"
Message-ID-Hash: PA3UPAK5ASZUP2LPYLXRNI4XLRRXQR65
X-Message-ID-Hash: PA3UPAK5ASZUP2LPYLXRNI4XLRRXQR65
X-MailFrom: carlos.aguilar.1998@polytechnique.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [km-fs-pcs] MLS encrypted in TLS
List-Id: Key management that provides forward security and post compromise security <km-fs-pcs.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/km-fs-pcs/-gXaOrg9PEiyCGNLUdBewniH0g0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/km-fs-pcs>
List-Help: <mailto:km-fs-pcs-request@ietf.org?subject=help>
List-Owner: <mailto:km-fs-pcs-owner@ietf.org>
List-Post: <mailto:km-fs-pcs@ietf.org>
List-Subscribe: <mailto:km-fs-pcs-join@ietf.org>
List-Unsubscribe: <mailto:km-fs-pcs-leave@ietf.org>

Sorry for the newbie question,
As I was re-reading the MLS Architecture RFC (
https://datatracker.ietf.org/doc/html/rfc9750#name-assumptions-on-transport-se)
I found this piece of text:
"Recommendation: Use transports that provide reliability and metadata
confidentiality whenever possible, e.g., by transmitting MLS messages over
a protocol such as TLS [RFC8446] or QUIC [RFC9000]."

Is this really applied by MLS applications? (e.g. MIMI or any other
application using MLS). If so, what will happen in the case of MLS+TLS? We
would encapsulate in TLS the initial MLS messages and then send as a TLS
session application messages through another connection?

Carlos

v2.46.0 | Report a Bug | By Email | System Status