[TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3

[Soatok Dreamseeker <[e-mail]>]

Right, sorry for the imprecise wording on that.

On Wed, Apr 22, 2026 at 1:40 PM Eric Rescorla <[e-mail]> wrote:

>
>
> On Wed, Apr 22, 2026 at 10:23 AM David Benjamin <[e-mail]>
> wrote:
>
>> Even with Merkle Tree Certificates, we actually still need this document
>> anyway for the end-entity TLS key, and the CertificateVerify signature it
>> generates.
>>
>
> As well as for the standalone certificates, right?
>
> -Ekr
>
>
>>
>> (I support publication, but I think I've said as much on this thread
>> already.)
>>
>> On Wed, Apr 22, 2026 at 1:14 PM Soatok Dreamseeker <
>> [e-mail]> wrote:
>>
>>> I've been working since 2024 on a proposal for Key Transparency for the
>>> Fediverse, as part of an overall goal to ship E2EE for private messages
>>> sent over Mastodon and other Fediverse software. My proposal uses pure
>>> ML-DSA. No composite/hybrid signatures. But my KEM recommendation remains
>>> hybrid-first.
>>>
>>> And, although I think Merkle Tree Certificates are a more realistic way
>>> to get post-quantum auth into TLS than shoving ML-DSA into the incumbent
>>> design, I support the publication. Just because it's published doesn't mean
>>> I have a gun held to my head to actually use it. I wish more of the people
>>> raising objections would consider this important fact.
>>>
>>> On Wed, Apr 22, 2026 at 10:43 AM Sean Turner <[e-mail]> wrote:
>>>
>>>> Reminder that this WGLC ends tomorrow.
>>>>
>>>> spt
>>>>
>>>> > On Apr 15, 2026, at 15:07, Sean Turner <[e-mail]> wrote:
>>>> >
>>>> > Reminder that this WGLC is still ongoing.
>>>> >
>>>> > spt
>>>> >
>>>> >> On Apr 9, 2026, at 15:30, Sean Turner <[e-mail]> wrote:
>>>> >>
>>>> >> This is the working group last call for Use of ML-DSA in TLS 1.3.
>>>> Please review draft-ietf-tls-mldsa [1] and reply to this thread indicating
>>>> if you think it is ready for publication or not. If you do not think it is
>>>> ready please indicate why. This call will end on April 23, 2026.
>>>> >>
>>>> >> REMINDER: If you have not done so recently, review the TLS WG's Mail
>>>> List Procedures; see [2].
>>>> >>
>>>> >> The Chairs,
>>>> >> Deirdre, Joe, and Sean
>>>> >>
>>>> >> [1] https://datatracker.ietf.org/doc/draft-ietf-tls-mldsa/
>>>> >> [2]
>>>> https://mailarchive.ietf.org/arch/msg/tls/ucdImHExlbOf4Q3BCG81gjzi2xE/
>>>> >
>>>>
>>>> _______________________________________________
>>>> TLS mailing list -- [e-mail]
>>>> To unsubscribe send an email to [e-mail]
>>>>
>>> _______________________________________________
>>> TLS mailing list -- [e-mail]
>>> To unsubscribe send an email to [e-mail]
>>>
>> _______________________________________________
>> TLS mailing list -- [e-mail]
>> To unsubscribe send an email to [e-mail]
>>
>