[Plants] Re: Call for adoption: draft-gray-plants-mtc-deploy-use-cases-01 (Ends 2026-10-02)

[Michael Richardson <[e-mail]>]

[e-mail] <[e-mail]> wrote:
    > The problem is that I was not able to make a cert with ML-DSA work
    > correctly without importing the root cert.  Try it yourself with
    > mldsa.digicert.com.  I, personally, feel this is not something which is

Nalini, this is true for every algorithm.

If/When the public anchors move to MLDSA (or MTC or 3ROT13), then those
anchors will be commonly present.

RFC9915 is necessary, but I don't think it is sufficient.

{If we want non-MTC PKI to work with browsers, such as for Quantum-Safe Enterprise
(private) PKI, then we'll need to make sure that the non-MTC does not go
away.  I think that there is a real risk}

--
Michael Richardson <[e-mail]>   . o O ( IPv6 IøT consulting )
           Sandelman Software Works Inc, Ottawa and Worldwide

**       My working hours and your working hours may be different.         **
** Please do not feel obligated to reply outside your normal working hours **