[TLS] Re: Deployability of DTLS 1.3, HRR, and MLKEM512X25519
David Benjamin <davidben@chromium.org> Tue, 01 September 2026 14:44 UTC
Return-Path: <davidben@google.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id C6C991331CF24 for <tls@mail2.ietf.org>; Tue, 1 Sep 2026 07:44:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788273874; bh=drYLOYy6WlKjFWrMWagi/WE8kApo7bLV2x8sOrE6eKM=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=FETSGxj4N9nGn2xMlLfUZ1Q5h+B5uxLIhZ87H0PS4EAikwGoJK8qzpaUZMD5A8Cjv AHMLRMnIG4iDeXnPTV/6PLrlXcAauLrLIjRemL0VJyJX18fvJO3FbAbflfLot9fvVE GSBMOWOjHoXxwZJqmA0ThNxBNye+7DhKxFacs/zQ=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -9.489
X-Spam-Level:
X-Spam-Status: No, score=-9.489 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=chromium.org
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WdFJNI48zhDg for <tls@mail2.ietf.org>; Tue, 1 Sep 2026 07:44:34 -0700 (PDT)
Received: from mail-ej1-x62c.google.com (mail-ej1-x62c.google.com [IPv6:2a00:1450:4864:20::62c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 5AB531331CF07 for <tls@ietf.org>; Tue, 1 Sep 2026 07:44:34 -0700 (PDT)
Received: by mail-ej1-x62c.google.com with SMTP id a640c23a62f3a-c250a2bc3b3so138143966b.2 for <tls@ietf.org>; Tue, 01 Sep 2026 07:44:34 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1788273873; cv=none; d=google.com; s=arc-20260327; b=i8Su0FAlA4smMfAA9TMkFL8UwbCL9yHZM1tKT3sJI8bYqMIQybZEADEF2bzo5XSfkJ VQGnNLMUUY0uzhEsFnIP9WGuHCmkYeTR+UnFTOK95nxuVsOjOsqyQxiS2czpo4d7KUyi eUPEJQonSd6p1g5ySJ8CDtvOowT+T08N2/HWWfEX2PKSsycWJEKjsplnSOoeiGuSMAz9 GA1V7JYweO4Hu04cHyNvTm41Dt26TZvhZDrI4POHgIW9chBx3/7ABNrhHyf+b7XugXGs /0TU7T0oUj0tRXMgcFCLQeQh5fwCWEAiMYz0boYdQ7qRua5w1BYgZXsGUDxJBRiuZwCp 0xAw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=F/XG5mJu2Pw4GmQxgWKvoas77FgTVe3PeLajO1Rrzkk=; fh=vCtnOkIRlYMRQ56ELi8jnzKIxxoULjRR6fvSUWk/l/E=; b=noRPPPU6JBH8i0vCrIWOEPGvYvm6zv30vacval0bcjp8v34rCl52A1NL/heKg4Huvr ASnb7D6oa4htMB42HN4QtP6X9NlSzN3navQFjkT8ktFLWw5F/5M8ja0j0NEUEEMNl3SZ Dzj0rtV7cFomM0SpOhWs1CbRCyj5Rl6vyeBELA/jI6VdOGGa304PfKXeYbGU0ricV3EU eaQdM1udTkPjcORjTkrWtgnvNTDmfQQ+pHBuxotadC2YUg2owGrGGWHVivFNy36MO3vi ws2dO5mFiZB8oA+uwgXJttaqy+Dix9utwF1MpD45wFFRByb1qyYIlcLXtqa3b/Fjyqr8 b9Pg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; t=1788273873; x=1788878673; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=F/XG5mJu2Pw4GmQxgWKvoas77FgTVe3PeLajO1Rrzkk=; b=EnpA78M+SoUF5XFgSZXqmrppSrEJT4CFyE5A1yYC79dhgbplzJ/LkW0thgMvIVtzbs T9fY8WW0bRsHZAfyeIUYQjC/IRSVJyXz1CfjH1D/t8Y73memmzPbqgjoN59xfBxi3Yhh A7tlfrcV/BVCdi2at/bTR8yQZCaMZSf406HvY=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788273873; x=1788878673; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=F/XG5mJu2Pw4GmQxgWKvoas77FgTVe3PeLajO1Rrzkk=; b=RCeF3TdI6wBwwqj7tnVdDdB4gPt8TskbTXU24kJNef+mlE7/Jcnu8S16eQhtEEW678 vtJRBwOga6oxupY7MOviwPRNmzAzIjMV8HGd/79Dt8DQSsp1or0wqDSogTisqfc1mVC1 QufTFBf7zSa8f/cxTNSozQ/2vCM6GJpt3/H+pF3D+tP3j/ZWeVEAvQ3/VQT1jEI0jK2N v1Z0uiinZ3H+mjd+rdp3fI+D5FhwIj0DvenmhJwHjHqyTynxq4FIaNHxN99F93kd0ahA gRkiyFn+f0aEcVsV9KeA30Ae82119Y//w8+zg8T2WOJGILhwJ2RPU9OOhAvHapj3n76x ot8g==
X-Forwarded-Encrypted: i=1; AHgh+RrCAvCtVUfIFPwHcXFqTwAsBVge5tQooLn5JWv1scNgSzZDZPAz6Clmly6HZ91vr7TL/AU=@ietf.org
X-Gm-Message-State: AFuF++mY1/aouGLc/7/UWK7wSM6xUEklcoDm9cveITIXA+NsN6Wa2dyc nnunCIlpwJuSlFZAWCZDR2kpvhd04nQfEq87QiqJvpCP4HvQee6mx59DSh+BatqbkzGVRsyG++v Q9IaQHPex/O3gzJZGtS2MWVuYECEU1fy0s826Dp8=
X-Gm-Gg: AYBFou34xXxLDT40rmbsWHUf5GUBEf2wGxnnr5OggTvwmFXKSqCpIYhkrPYj6rcMirF VsGZkZxWEMOH2PVzXuFP1lgS1FHe3Rr1vHkoIY8T4Pv+ovFmgcbZeh/Ck+MceK9cGL/bfNsvnQ+ s4dhHBubVwZBRspd66hA9dKDxWw74NMANdPr9BqpjWVf7ud7Bs6IiMGznhVZwbegYVurLS3O780 Vjf0VSwvU6i68Be6cjO6lVnbCTl30DMrpRIfpj5olTBhvSFZ4ltJVrGeWtTHTUES16WjfxgBbbp iV+MCmm3D4WkNy18+a3PMElFtWcmYMj2BmQyYMPzyYcMeQUPQCXpBu5OTmuJ3c0epPI/T3gYDGH SytdT4k1JjThVZZ7/9Ry2RSPnVsqcmg==
X-Received: by 2002:a17:906:7945:b0:c20:f6d9:d8c7 with SMTP id a640c23a62f3a-c255746d627mr2007601166b.24.1788273872313; Tue, 01 Sep 2026 07:44:32 -0700 (PDT)
MIME-Version: 1.0
References: <AS4PR07MB882587C4F9F2AE3F9447B25189A92@AS4PR07MB8825.eurprd07.prod.outlook.com> <11c93a79-05e5-4323-b7a4-8a521f4d2f4f@app.fastmail.com> <AS4PR07MB882529CB2DB3C3D31C56106289A82@AS4PR07MB8825.eurprd07.prod.outlook.com> <0648bd18-97c2-4111-a789-aaac641bdc2e@app.fastmail.com>
In-Reply-To: <0648bd18-97c2-4111-a789-aaac641bdc2e@app.fastmail.com>
From: David Benjamin <davidben@chromium.org>
Date: Tue, 01 Sep 2026 10:44:15 -0400
X-Gm-Features: AcwNN1VlVetb7OtII2jijVuVN6fXFapQyg4coOZdnQvoKcu7PgNCJDdTKHk378g
Message-ID: <CAF8qwaAOCvc7N4Ny8ZRY=WfbdiXqT-eotuZWO9hZnnJYAqJ2Mw@mail.gmail.com>
To: Martin Thomson <mt@lowentropy.net>
Content-Type: multipart/alternative; boundary="000000000000ee3a96065a6cf403"
Message-ID-Hash: CHQOHB5MPPVW6NH3X6TNTM6CO2QKQUGY
X-Message-ID-Hash: CHQOHB5MPPVW6NH3X6TNTM6CO2QKQUGY
X-MailFrom: davidben@google.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "tls@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Deployability of DTLS 1.3, HRR, and MLKEM512X25519
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/Aahq_wo7JhzYPRDC-dR9skAnZ90>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
On Tue, Sep 1, 2026 at 5:09 AM Martin Thomson <mt@lowentropy.net> wrote: > On Tue, Sep 1, 2026, at 09:00, John Mattsson wrote: > > [...] Based on your comments, I assume > > BoringSSL and NSS interoperate. > > We've done more testing with wolfSSL than BoringSSL. I don't have the > specifics though. I'll put you in touch with people who know more than I > do. > I believe BoringSSL and NSS interoperate fine. At least, if they don't, I suspect someone would have complained about WebRTC by now! There was one bug[0] just outside the DTLS stack (the impetus for [1]), but I'm not aware of any other hiccups during rollout. BoringSSL also enables DTLS 1.3 by default without much drama. (But also DTLS for us is almost entirely WebRTC. WebRTC gets to play on easy a bit because it sits atop a mess of other protocols that takes care of any return address concerns.) David [0] https://bugzilla.mozilla.org/show_bug.cgi?id=1952706 [1] https://mailarchive.ietf.org/arch/msg/tls/QrIpfXNRiIoKoO8gTXvnM2MhjMA/
- [TLS] Deployability of DTLS 1.3, HRR, and MLKEM51… John Mattsson
- [TLS] Re: Deployability of DTLS 1.3, HRR, and MLK… Martin Thomson
- [TLS] Re: Deployability of DTLS 1.3, HRR, and MLK… Marco Oliverio
- [TLS] Re: Deployability of DTLS 1.3, HRR, and MLK… Martin Thomson
- [TLS] Re: Deployability of DTLS 1.3, HRR, and MLK… John Mattsson
- [TLS] Re: Deployability of DTLS 1.3, HRR, and MLK… Frederik Wedel-Heinen
- [TLS] Re: Deployability of DTLS 1.3, HRR, and MLK… Ryan Hooper (ryhooper)
- [TLS] Re: Deployability of DTLS 1.3, HRR, and MLK… John Mattsson
- [TLS] Re: Deployability of DTLS 1.3, HRR, and MLK… Martin Thomson
- [TLS] Re: Deployability of DTLS 1.3, HRR, and MLK… David Benjamin