[Ssh] Re: Secure Shell Maintenance (sshm) WG Virtual Meeting: 2026-10-07

Damien Miller <djm@mindrot.org> Mon, 05 October 2026 23:35 UTC

Received: from plane.compute.dc.uq.edu.au (plane.compute.dc.uq.edu.au [130.102.188.57]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id 213F942; Mon, 05 Oct 2026 23:35:06 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=none; spf=pass (mx.ietf.org: domain of djm@mindrot.org designates 130.102.188.57 as permitted sender) smtp.mailfrom=djm@mindrot.org; dmarc=none
Received: from smtp2.compute.dc.uq.edu.au (smtp2.compute.dc.uq.edu.au [10.208.138.89]) by plane.compute.dc.uq.edu.au (8.14.5/8.14.5) with ESMTP id 695NYwoL113858; Tue, 6 Oct 2026 09:34:58 +1000
Received: from mailhub.eait.uq.edu.au (hazel.eait.uq.edu.au [130.102.60.17]) by smtp2.compute.dc.uq.edu.au (8.14.5/8.14.5) with ESMTP id 695NYwGM038497 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 6 Oct 2026 09:34:58 +1000
Received: from haru.mindrot.org (haru.mindrot.org [130.102.96.5]) by mailhub.eait.uq.edu.au (8.15.1/8.15.1) with ESMTPS id 695NYw1j002027 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Tue, 6 Oct 2026 09:34:58 +1000 (AEST)
Received: from localhost (localhost [127.0.0.1]) by haru.mindrot.org (OpenSMTPD) with ESMTP id 48b5ebe8; Tue, 6 Oct 2026 10:34:58 +1100 (AEDT)
Date: Tue, 06 Oct 2026 10:34:58 +1100
From: Damien Miller <djm@mindrot.org>
To: IESG Secretary <iesg-secretary@ietf.org>
In-Reply-To: < 178913882920.72065.17334770778295812561%dt-datatracker-597c8c8754-4t7c8@mailhub.eait.uq.edu.au>
Message-ID: <40819e6c-1c81-1b41-1313-c491b7206841@mindrot.org>
References: < 178913882920.72065.17334770778295812561%dt-datatracker-597c8c8754-4t7c8@mailhub.eait.uq.edu.au>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
x-ms-reactions: disallow
X-Scanned-By: MIMEDefang 2.75 on 130.102.60.17
X-Spamd-Bar: ---
Message-ID-Hash: 7ZP3423BT3IW6BXZGX2X3RRM4LH6SPGG
X-Message-ID-Hash: 7ZP3423BT3IW6BXZGX2X3RRM4LH6SPGG
X-MailFrom: forwardingalgorithm@dmarc.ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-ssh.ietf.org-0; header-match-ssh.ietf.org-1; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: IETF-Announce <ietf-announce@ietf.org>, ssh@ietf.org
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [Ssh] Re: Secure Shell Maintenance (sshm) WG Virtual Meeting: 2026-10-07
List-Id: "The SSH mail list will allow discussions on improving aspects of the Secure Shell (SSH) protocol." <ssh.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ssh/j4k69frRS3AWCmO4c71EheG88kw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ssh>
List-Help: <mailto:ssh-request@ietf.org?subject=help>
List-Owner: <mailto:ssh-owner@ietf.org>
List-Post: <mailto:ssh@ietf.org>
List-Subscribe: <mailto:ssh-join@ietf.org>
List-Unsubscribe: <mailto:ssh-leave@ietf.org>

On Fri, 11 Sep 2026, IESG Secretary wrote:

> The Secure Shell Maintenance (sshm) WG will hold a virtual interim meeting on
> 2026-10-07 from 08:00 to 09:30 UTC.
> 
> Agenda:
> - Discuss issues with https://datatracker.ietf.org/doc/draft-ietf-sshm-composite-sigs/

one of the pending items for discussion was whether to either add a
certificate format to the hybrid PQ signatures draft or to add a formats
for the hybrid signatures to the certificates draft.

IMO the certificates draft is a fair bit further along, and I don't think
it makes sense to stall it for a draft that is at an earlier stage so,
in the interests of having something concrete to discuss, I've written a
certificate format section in the hybrid signatures draft.

https://github.com/djmdjm/drafts/blob/c47dc10f1b/draft-ietf-sshm-composite-sigs.txt#L461

I don't intend to push this to datatracker until we've had a chance to
discuss it and unless the discussion falls in favour of doing it this
way.

This section could also be used a the basis for a similar thing in the
non-hybrid ML-DSA draft.

See you tomorrow :)

-d