Received: from plane.compute.dc.uq.edu.au (plane.compute.dc.uq.edu.au
 [130.102.188.57])
	(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mx.ietf.org (Postfix) with ESMTPS id 213F942;
	Mon, 05 Oct 2026 23:35:06 +0000 (UTC)
Authentication-Results: mx.ietf.org;
	dkim=none;
	spf=pass (mx.ietf.org: domain of djm@mindrot.org designates 130.102.188.57 as
 permitted sender) smtp.mailfrom=djm@mindrot.org;
	dmarc=none
Received: from smtp2.compute.dc.uq.edu.au (smtp2.compute.dc.uq.edu.au
 [10.208.138.89])
	by plane.compute.dc.uq.edu.au (8.14.5/8.14.5) with ESMTP id 695NYwoL113858;
	Tue, 6 Oct 2026 09:34:58 +1000
Received: from mailhub.eait.uq.edu.au (hazel.eait.uq.edu.au [130.102.60.17])
	by smtp2.compute.dc.uq.edu.au (8.14.5/8.14.5) with ESMTP id 695NYwGM038497
	(version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT);
	Tue, 6 Oct 2026 09:34:58 +1000
Received: from haru.mindrot.org (haru.mindrot.org [130.102.96.5])
	by mailhub.eait.uq.edu.au (8.15.1/8.15.1) with ESMTPS id 695NYw1j002027
	(version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO);
	Tue, 6 Oct 2026 09:34:58 +1000 (AEST)
Received: from localhost (localhost [127.0.0.1])
	by haru.mindrot.org (OpenSMTPD) with ESMTP id 48b5ebe8;
	Tue, 6 Oct 2026 10:34:58 +1100 (AEDT)
Date: Tue, 6 Oct 2026 10:34:58 +1100 (AEDT)
From: Damien Miller <djm@mindrot.org>
To: IESG Secretary <iesg-secretary@ietf.org>
In-Reply-To: <
 178913882920.72065.17334770778295812561%dt-datatracker-597c8c8754-4t7c8@mailhub.eait.uq.edu.au>
Message-ID: <40819e6c-1c81-1b41-1313-c491b7206841@mindrot.org>
References: <
 178913882920.72065.17334770778295812561%dt-datatracker-597c8c8754-4t7c8@mailhub.eait.uq.edu.au>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
x-ms-reactions: disallow
X-Scanned-By: MIMEDefang 2.75 on 130.102.60.17
X-Spamd-Bar: ---
Message-ID-Hash: 7ZP3423BT3IW6BXZGX2X3RRM4LH6SPGG
X-Message-ID-Hash: 7ZP3423BT3IW6BXZGX2X3RRM4LH6SPGG
X-MailFrom: forwardingalgorithm@dmarc.ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop;
 banned-address; header-match-ssh.ietf.org-0; header-match-ssh.ietf.org-1;
 emergency; member-moderation; nonmember-moderation; administrivia;
 implicit-dest; max-recipients; max-size; news-moderation; no-subject;
 digests; suspicious-header
CC: IETF-Announce <ietf-announce@ietf.org>, ssh@ietf.org
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [Ssh] Re: Secure Shell Maintenance (sshm) WG Virtual Meeting: 2026-10-07
List-Id: "The SSH mail list will allow discussions on improving aspects of the
 Secure Shell (SSH) protocol." <ssh.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/ssh/j4k69frRS3AWCmO4c71EheG88kw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ssh>
List-Help: <mailto:ssh-request@ietf.org?subject=help>
List-Owner: <mailto:ssh-owner@ietf.org>
List-Post: <mailto:ssh@ietf.org>
List-Subscribe: <mailto:ssh-join@ietf.org>
List-Unsubscribe: <mailto:ssh-leave@ietf.org>

On Fri, 11 Sep 2026, IESG Secretary wrote:

> The Secure Shell Maintenance (sshm) WG will hold a virtual interim meeting on
> 2026-10-07 from 08:00 to 09:30 UTC.
> 
> Agenda:
> - Discuss issues with https://datatracker.ietf.org/doc/draft-ietf-sshm-composite-sigs/

one of the pending items for discussion was whether to either add a
certificate format to the hybrid PQ signatures draft or to add a formats
for the hybrid signatures to the certificates draft.

IMO the certificates draft is a fair bit further along, and I don't think
it makes sense to stall it for a draft that is at an earlier stage so,
in the interests of having something concrete to discuss, I've written a
certificate format section in the hybrid signatures draft.

https://github.com/djmdjm/drafts/blob/c47dc10f1b/draft-ietf-sshm-composite-sigs.txt#L461

I don't intend to push this to datatracker until we've had a chance to
discuss it and unless the discussion falls in favour of doing it this
way.

This section could also be used a the basis for a similar thing in the
non-hybrid ML-DSA draft.

See you tomorrow :)

-d
