[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-05 (Ends 2025-11-26)

[Kazuho Oku <[e-mail]>]

2025年11月6日(木) 4:01 Stephen Farrell <[e-mail]>:
>
>
> I re-read the document. It has zero commentary on the issues about
> hybrids vs. pure PQ. It may be hard to reach rough consensus on what
> to say about that, but it is a topic where people have significantly
> different opinions, so I think we ought say something, for example,
> along the lines of, "At the time of writing a significant number of
> knowledgeable people consider it better to deploy hybrid KEMS, while
> some do dispute that. Opinions may change over time." I'd be happy
> but surprised if the WG had consensus to add such text, but we
> should. Absent that, I think producing an RFC based on this draft
> provides a misleading signal to the community.

+1.

Given that Section 6 says the entries in the TLS Supported Groups IANA
registry will have Recommended = N, I think it would make sense to say
this explicitly in the abstract.

This seems like the kind of clarification the WG could easily agree
on, as it just surfaces in the abstract what is already stated later
in the document, and helps avoid giving the impression that publishing
this RFC implies that these algorithms are recommended by the IETF for
deployment.

-- 
Kazuho Oku