IETF Logo Mail Archive

[TLS] Re: Tommy Jensen's Discuss on draft-ietf-tls-mldsa-04: (with DISCUSS and COMMENT)

Jack Grigg <ietf@jackgrigg.com> Thu, 02 July 2026 15:18 UTC

Return-Path: <me@jackgrigg.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id C655810CA8019 for <tls@mail2.ietf.org>; Thu, 2 Jul 2026 08:18:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1783005504; bh=sAp3p5ugyH+S3fNd9Ha08GDIIJlaUC3Oe4q3YSPWmZw=; h=References:In-Reply-To:Reply-To:From:Date:Subject:To:Cc; b=KxnbRc+qxGGqvwkPt3k6jNwIXzkqBs3YqK2qNyiDX6LjXv4r39Ub8PUVGZd2RLcOc QHCvMqO4GeH6N6yVNIB1kulT9ycqfQGWcjop5+HESzn6AVCKZdTfVuqMzPIlUBN4g+ jtRyYUXXkJrWdxqSVjPND77ZrpMpHGd/0QSRrRR0=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.895
X-Spam-Level:
X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I1aMLNo9qb5j for <tls@mail2.ietf.org>; Thu, 2 Jul 2026 08:18:24 -0700 (PDT)
Received: from mail-ej1-f45.google.com (mail-ej1-f45.google.com [209.85.218.45]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id D860210CA6FEA for <tls@ietf.org>; Thu, 2 Jul 2026 08:17:29 -0700 (PDT)
Received: by mail-ej1-f45.google.com with SMTP id a640c23a62f3a-c12a430d71dso185193166b.3 for <tls@ietf.org>; Thu, 02 Jul 2026 08:17:29 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1783005443; cv=none; d=google.com; s=arc-20260327; b=I+2q0kfDBlzeMN01LkJeBxW+6ffXTp81wbuYiNUKYKHlY3xUQLZ2IAptHM375c5vLv 6IYX/N5xGCL6EKasqEOjkXov+mf1nZ0+HjE00Je9fFaAFjGFAoQAgVdlMALDm1h0D6CX Tw21VkDIFNGrSCjGdU6FU+1ZYpQoBd37zdJDZLsly9OINM2JrQrasI29S7YxP/cbX+/S KjyoId3CXt+X8hehCVsKxjLQ7kd9gXNCvrSh0eRs6gkn0sMT4nYjNIZJAHQ4bugYUw1V m8zdrFpcSum2guTT+iOjObgvoYKzogQ88GUvEcbyyc/5Am/lG0e39oScSIPi3kb9l8B2 DfYA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:reply-to:in-reply-to:references :mime-version; bh=7p8BslUfep02fPSRVo6rNxHyEzA+C77mw5UfUXYPXuw=; fh=HIhJ5rSjvlhEwKOMRyoY4wj9HTE8YOkZnercugtoEXI=; b=JMRuB4cVLpuVsrGyejvIq9u64OzfEKO8e4AP2SWixwBOW8SLez5cLA04A4tvlElltk 3QUjXVn+oWfeu4LeFg6MTfsnooC9coNm1SjAAgxy4n+R5FwdvMqrOMZg+lVnSZ6LpyvD epxWv2llDr2eZRpl2S3pxwwDhPfM+evO2rzfi8Gf72IO+Nq+oQ69FH7I8JGty6wREFh4 aO9VjTC9nou4VjGT9HdBKs/V7xAhnV0T4a8aDw76LPmbcL4dI/SdJspw7jx+FtaupdM0 cfQNQtO4a/ZKxWxu3IPjLAbZNWUZ1VHv+v0RmJpyzNvY3QDrFqPJuDv4qPjl+qUkvQAi 9qWw==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783005443; x=1783610243; h=cc:to:subject:message-id:date:from:reply-to:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=7p8BslUfep02fPSRVo6rNxHyEzA+C77mw5UfUXYPXuw=; b=rcKZac4UAE+eGqEKitRSpIsaZjMRRBhsrUKhils0qFhMmXYVV2/UVLjdVY7svWRPNn PSexnfmhnnH0uOW0sRV8O6phlxX1QExOO0bXgFlVZsv3Y1aP35kIaIxQwGALFKqnZpCm L+y6yaC0eGQ5PCTOB9UgO9fkpvfizNW6NxhjTsWgcqJFG+OoZGhOzcEbtqmXLMX/prJu Xvks2sMgnyzLxfaNGeM0hkRdSFuZcnJ7KWz1VqTxxVoraD4ITcfNpHckItvk+a5JI+02 Rj67bhiXj9volwFNLPNNceGzBsl9vCHIF1KYl2NzVqVysCoQ48pJ1t2kotcjARaZ9Kk2 5jgA==
X-Forwarded-Encrypted: i=1; AHgh+RqLKdukmzCWRq5XieR2LVV/ROEgEBYiFpgiSkMXMADMKfnde6D+oprZDnyUi5b5j13Shgs=@ietf.org
X-Gm-Message-State: AOJu0YwiuRL7d4vN4IjcaUGEw7ztuOq+8Jtc4KCu2wFxFvOBxC0dEfWZ VOs7+6nujPMKhJWJvkmQRP+Q2aOG22GFFf4hgCOp6kSL8hVegsSROaxgNr7fox82uA2ZiKGqgXI vOglFJiip+y30KdOhud5vlddboOgw3+Y2g9l5djY7/Q==
X-Gm-Gg: AfdE7clO4iJQqxCdUHvRRoIPq9Z4POJaKdv2skydaO84ceZe5DNU0gHhx2z5M8HafUC PCmeHj6CFc5QAnKUuUbZZYjxG/JeNJMi1H/2hnfxWWw0pXNZYcxRRNBVuZtrGglH4OUmx5MTz6q Lbi0tUOAbfxwTWKhFQxho8nPQCpn0BgXHj9K6SUlWckn3NTW7E2SotSq+InETsjCxQjmbpP/PY1 Z2WTIxMueE2GpnjWGxSwBTzBs7qX3bfvJRy+rin+Xw+a+iC8gK+4/irgo/fmNegwOmlqAAfxQ==
X-Received: by 2002:a17:907:96a1:b0:c12:9b93:61fd with SMTP id a640c23a62f3a-c12a9d37e0fmr278885766b.6.1783005442729; Thu, 02 Jul 2026 08:17:22 -0700 (PDT)
MIME-Version: 1.0
References: <178296900323.2559760.5279960420005540282@dt-datatracker-f9b87776f-8pmmg> <MN2PR17MB40315CB603D672A04D8CBE36CDF52@MN2PR17MB4031.namprd17.prod.outlook.com> <CAMjbhoWUMYeTvhLjR0yDTF7Gw+CMpTcjdAyojkkyBw11SnK71g@mail.gmail.com> <CABDV=UP=+VZ=U81nR1K3m6gLOanrnxg=8Ykv6ohdVJwB_+PGMg@mail.gmail.com> <DB9PR07MB88215412994E7A6EF188CAFF89F52@DB9PR07MB8821.eurprd07.prod.outlook.com>
In-Reply-To: <DB9PR07MB88215412994E7A6EF188CAFF89F52@DB9PR07MB8821.eurprd07.prod.outlook.com>
From: Jack Grigg <ietf@jackgrigg.com>
Date: Thu, 02 Jul 2026 16:17:10 +0100
X-Gm-Features: AVVi8Cd9qdvBEW18hMzxD8bG_G4FAGXKQTwJ4w6RoFqEjx207Cn6XXgdaRvEnWw
Message-ID: <CAPC=aNVhQvgmcRz=VdzmmwsHgSRBHeKtKfzgD2v0ZYrF42a12w@mail.gmail.com>
To: John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="0000000000000c043d0655a24e20"
Message-ID-Hash: RSR4OEKNJ2RMXYU5P3XBCQTQB4OB576I
X-Message-ID-Hash: RSR4OEKNJ2RMXYU5P3XBCQTQB4OB576I
X-MailFrom: me@jackgrigg.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: The IESG <iesg@ietf.org>, draft-ietf-tls-mldsa <draft-ietf-tls-mldsa@ietf.org>, tls-chairs <tls-chairs@ietf.org>, tls <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Reply-To: ietf@jackgrigg.com
Subject: [TLS] Re: Tommy Jensen's Discuss on draft-ietf-tls-mldsa-04: (with DISCUSS and COMMENT)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/2VRyxy5n5qY3CAXwUHIOCbmAcZs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On Thu, Jul 2, 2026 at 3:54 PM John Mattsson <john.mattsson=
40ericsson.com@dmarc.ietf.org> wrote:

> People may have different views, but my view is that RECOMMENDED = N does
> not require any explanation, whereas RECOMMENDED = Y and RECOMMENDED = D
> do. I see RECOMMENDED = N as the new default.
>

I agree with this reading. It is supported by the text of RFC 9847 Section
3:

> - N: Indicates that the item has not been evaluated by the IETF and that
the IETF has made no statement about the suitability of the associated
mechanism.
>
> [...] Any item not otherwise specified is set to "N". [...]

The RFC is clear that RECOMMENDED = N is now the default, and "making no
statement" means that an explanation is not required when using it.

Cheers,
Jack

v2.46.0 | Report a Bug | By Email | System Status