IETF Logo Mail Archive

[TLS] Re: [Last-Call] Re: Re: Last Call: <draft-ietf-tls-mldsa-03.txt> (Use of ML-DSA in TLS 1.3) to Informational RFC

Stephen Farrell <stephen.farrell@cs.tcd.ie> Thu, 04 June 2026 00:04 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id DD685FA6CDE9; Wed, 3 Jun 2026 17:04:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1780531462; bh=h/V74os8EbLeiW+oUA6/kDeUaB5BFIsQz2oubX85qR4=; h=Date:Subject:To:References:From:In-Reply-To; b=GgbupNs1DX+ZmaDiWj/8OHI98pmDI9p/2zeQpNBRv5y7CKkng/aDyvehVEmczAbxC m3CdoZajoP4Q6wMlJydQdNybW4JvfUNojbof5ITO03MKpU0KF1XtyVDiIZJZXXSE4g BQ4tlRUYmGCe8LLVoe7WfNGoNGv7cgqVSoFX4xkU=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y0kwOyYr77BS; Wed, 3 Jun 2026 17:04:20 -0700 (PDT)
Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazon11021100.outbound.protection.outlook.com [52.101.65.100]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id B0833FA6CDD9; Wed, 3 Jun 2026 17:04:20 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=aBc+RZZeZJHPTr/O6mh4Uqsk8KPDMNnz98098hScyTi07bbuDhwgA0GIZKoZAnhqIdAiIizYRNTWE0FsHKhrpHlT7eaDe/INxaFhlgVqeZMGHhuH5YmVzFp5nGZKbYBgrIUDZamy8cOzhIqpWBffxBG8foaGvav+mTL67wt6z6d6DpvhfZOn0TKhdK67xKmZ/E9c++OAzsaUlfQLpkLrr+/klLejWP8W70rbyytrXdIj4qXdrytqGhfjVOkCIWt6YmHvN//tI+3p4LJUyhF96rp2HQmsNz659boJNhgA5DEGk+wzfHPqR3VN2m1hSdxirIOy2mvi+kD76YyktzLzEA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=h/V74os8EbLeiW+oUA6/kDeUaB5BFIsQz2oubX85qR4=; b=t15PWbMa9B+u1IRjTjPtSRBYmLtGCF445rZ63mwFDWCw8P/CjdX+VqvZ9R11ezxq/mh930wev1YcoqV+XQNBWnbKY5uYgbZgKLgxvK6j0C1d5OXJxmEXvMYnXfFxz3wS8PuJoJtIKywKEjUm0xaAntPhgUN6dRm84De2vvfc15TTGRrrUIF2u4eTD8CWTjqh0IMn5yGuAlsas785OpeWkfDbdOtOLkYkMR4DBUiAPaXJu+4kLwfzjemaoHq7/UTINATJJ/cOHRvgmeFgNZijf6jIKOv+2r7p8DEa14fGNH1AR5XwFTl1BmQ69+lWI54ysTcUo5U4Q1FpQWl4AnUdlw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=h/V74os8EbLeiW+oUA6/kDeUaB5BFIsQz2oubX85qR4=; b=gVnze4/3bE8PMAa269I+ExeeTDJOKtztulq2I0OJQK0aLjfmrcAdwHuxKRn1sqvvQafmmHo+YPupQtuf/JQWlZcnmW+4xyDkGJIfLxESh6IZi02TX+31lq4U1hSIMgGQV0VD5UZCMTZAclvtuxxAMFe9D63/FIvLeJbK3bt1O8YMFi9oRbJufVyZZNYde8f0HsDF2PaEMNeMGKmW9Dl3qE3KVzYzUFEhgw4bAHD3vcSgQgeizmPgpTETFldSzQ4WXl7cR2jUD5yz6Iya2hfxypaTSVbzcHQRTPaoc9InnXDRQpc9OMj+djcqyFHn6VGpfvPhNHWGUeYnxMElxVPZew==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from PA3PR02MB11163.eurprd02.prod.outlook.com (2603:10a6:102:4b4::19) by VI0PR02MB10610.eurprd02.prod.outlook.com (2603:10a6:800:206::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.7; Thu, 4 Jun 2026 00:04:13 +0000
Received: from PA3PR02MB11163.eurprd02.prod.outlook.com ([fe80::71cc:8d7f:5cb5:3772]) by PA3PR02MB11163.eurprd02.prod.outlook.com ([fe80::71cc:8d7f:5cb5:3772%5]) with mapi id 15.21.0092.006; Thu, 4 Jun 2026 00:04:13 +0000
Message-ID: <6cbe67aa-c3a2-4d4d-98dc-f4d14c544676@cs.tcd.ie>
Date: Thu, 04 Jun 2026 01:04:10 +0100
User-Agent: Mozilla Thunderbird
To: tls@ietf.org, last-call@ietf.org
References: <20260603232934.2368794.qmail@cr.yp.to>
Content-Language: en-US
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
In-Reply-To: <20260603232934.2368794.qmail@cr.yp.to>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------zO1u9V4MbPzGl36ST52AfXJz"
X-ClientProxiedBy: DB8PR06CA0045.eurprd06.prod.outlook.com (2603:10a6:10:120::19) To PA3PR02MB11163.eurprd02.prod.outlook.com (2603:10a6:102:4b4::19)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: PA3PR02MB11163:EE_|VI0PR02MB10610:EE_
X-MS-Office365-Filtering-Correlation-Id: 0637a34c-f9da-4dc8-18f0-08dec1cccf3b
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|10070799003|376014|19092799006|786006|1800799024|366016|56012099006|11063799006|6133799003|22082099003|18002099003;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PA3PR02MB11163.eurprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(376014)(19092799006)(786006)(1800799024)(366016)(56012099006)(11063799006)(6133799003)(22082099003)(18002099003);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-MS-Exchange-AntiSpam-MessageData-1: XUnHI9+jT7alFQ==
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: 0637a34c-f9da-4dc8-18f0-08dec1cccf3b
X-MS-Exchange-CrossTenant-AuthSource: PA3PR02MB11163.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Jun 2026 00:04:12.9468 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: X8w8ZjC1raspbigM4bYVJ9e9Ndi8H9eO2JjsZBEA2GfzN51ncS/TVlftr+llJCTT
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI0PR02MB10610
Message-ID-Hash: RF5TLOGUHBDFIM5VJKHWNZSUADWADLBS
X-Message-ID-Hash: RF5TLOGUHBDFIM5VJKHWNZSUADWADLBS
X-MailFrom: stephen.farrell@cs.tcd.ie
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: [Last-Call] Re: Re: Last Call: <draft-ietf-tls-mldsa-03.txt> (Use of ML-DSA in TLS 1.3) to Informational RFC
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/1AsHetEbfXhNpu-BmXivDfwI6Mo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hiya,

On 04/06/2026 00:29, D. J. Bernstein wrote:
> IETF does not control software engineering. It_does_ control which TLS
> options it will endorse. At that layer, there are currently two choices:
> (1) common-sense ECC+PQ; (2) damaging security with solo PQ.

I disagree. There's also: (3) experiment with PQ authentication in TLS
while recommending against production deployment at this time.

Were (3) an IETF-consensus position, IMO publishing this document as an
RFC would not be problematic.

Cheers,
S.

v2.46.0 | Report a Bug | By Email | System Status