[saag] IETF 120 TLS working group report

[Joseph Salowey <[e-mail]>]

TLS met on Wednesday afternoon. We had some discussion on both Pure KEM PQ
and hybrid KEM PQ key exchange for TLS. It seems like there is support for
also defining a pure KEM approach, but there is some decisions that need to
be made on whether the general mechanism and specific KEMs are defined in
one or two documents. There was consensus in the room not to try to update
the MTI in 8446 bis. We had some discussion on the requirements and process
for the formal analaysis triage panel for tls. The current process needs
more refinement. The mechanism for ECH configuration continues to evolve
and there was a question whther it should be made into a general mechanism.
Presentation on SSLKEYLOG for ECH and Extended Key Update received some
interest. We finished of with a discussion of improving trust store
negotiation for TLS. Two mechanisms were proposed: Trust expressions and
Trust Achor IDs. The group seemed to favor trust anchor IDs, but there is
still a contingent of the group who don’t like the general idea.