[saag] LAMPS @ IETF 126

Russ Housley <housley@vigilsec.com> Thu, 23 July 2026 14:57 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: saag@mail2.ietf.org
Delivered-To: saag@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id EC6A311D85A5C for <saag@mail2.ietf.org>; Thu, 23 Jul 2026 07:57:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784818650; bh=TBtIS9Ssu4Lp0FS0dCt5byI1Ga/pLcuhEMILYCGkSiA=; h=From:Subject:Date:To; b=uAlb8xnF0RHtz6X2VrOk/cfpKHBk56nU9fsQb24pzg0qPmDubatD4V38mdBfEh9Hg q/bqLMzC/Jlsq3KHWQs77s7JEtyZ5qUZE+eQQxDPRtb1MAmLdWCEjlVFFiQ7ldAt47 +rGLbo2NSwQdb+WiDwbodtd6rHNe2GNfcE4tCV80=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.299
X-Spam-Level:
X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001, SUBJ_ALL_CAPS=0.5] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=vigilsec.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q3x1ayLkeFzm for <saag@mail2.ietf.org>; Thu, 23 Jul 2026 07:57:30 -0700 (PDT)
Received: from mail3.g24.pair.com (mail3.g24.pair.com [66.39.134.11]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 88D6511D85A53 for <saag@ietf.org>; Thu, 23 Jul 2026 07:57:30 -0700 (PDT)
Received: from mail3.g24.pair.com (localhost [127.0.0.1]) by mail3.g24.pair.com (Postfix) with ESMTP id 5653A1A1DBC for <saag@ietf.org>; Thu, 23 Jul 2026 10:57:30 -0400 (EDT)
Received: from smtpclient.apple (rtr-guestwired.meeting.ietf.org [31.133.144.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail3.g24.pair.com (Postfix) with ESMTPSA id 183D81A1E0B for <saag@ietf.org>; Thu, 23 Jul 2026 10:57:29 -0400 (EDT)
From: Russ Housley <housley@vigilsec.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.600.51.1.1\))
Message-Id: <C2D0CA2F-A434-4183-B135-0B3CC34CC0D0@vigilsec.com>
Date: Thu, 23 Jul 2026 10:57:18 -0400
To: IETF SAAG <saag@ietf.org>
X-Mailer: Apple Mail (2.3864.600.51.1.1)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vigilsec.com; h=from:content-type:content-transfer-encoding:mime-version:subject:message-id:date:to; s=pair-202402141609; bh=yHzxvmjV1ShdBc8i5It+Rt0Ig2ptiBqsdDwx8ELi+Rc=; b=dhS+1ln6yzcl7myIXl8+IkPPvwdXIYk5UC7/1/CzIqMbXwXshAUhs9/4pe6YNbb0Z7EBv6QnRDCn4OsMSFE4L9/R47S2BDlyF8SFulA/m7ZHwt2ir0eY3L2ybzLGoH8kkjnbhbLkTJGEMqIoEi2+4lJVNBhwsL6RCfoMEFQGg2XNgMr6tLlyVLkCyahrSx5FNqRgaqY32Bj6hu+UCXmgQPY08xyYhaSn40OqIkXHDdXQOtJbbFdF3W9Dx/BSSsuSnu3+5Z8gNSOAZnQxNnRxJ8UkAUo8/GJ89m4YpRM9I0Dvr6JM0BUIGhygTxUiI9rhpYl0wuAdewG0JmQgxdHGaA==
X-Scanned-By: mailmunge 3.09
Message-ID-Hash: BNK35W7UFZTDDFUUPPGL53YLTA5GA3MG
X-Message-ID-Hash: BNK35W7UFZTDDFUUPPGL53YLTA5GA3MG
X-MailFrom: housley@vigilsec.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-saag.ietf.org-0; header-match-saag.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [saag] LAMPS @ IETF 126
List-Id: Security Area Advisory Group <saag.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/K2ZguvMYqADeFEA8qKPrHZPsu38>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Owner: <mailto:saag-owner@ietf.org>
List-Post: <mailto:saag@ietf.org>
List-Subscribe: <mailto:saag-join@ietf.org>
List-Unsubscribe: <mailto:saag-leave@ietf.org>

The LAMPS Working Group met at IETF 126 for one hour, greatly reduced from recent IETF meetings. The work is getting done: two RFCs were published, 8 I-Ds are in the RFC editor's queue, and 4 I-Ds are with the IESG.

At this meeting, the LAMPS WG discussed updates to attestation freshness, certificate discovery, S/MIME Version 4.0, one-signature certificates, the ASN.1 parameterized SIGNED type.  On the algorithm front, the group is waiting on NIST before proceeding with FN-DSA documents, and the group is waiting in the CFRG before proceeding with FrodoKEM documents. A possible composite of FN-DSA and LMS was discussed, and many people expressed sever dislike.