[TLS] Re: Scope of the IAB's appeal response

Nadim Kobeissi <nadim@symbolic.software> Tue, 14 July 2026 13:18 UTC

Return-Path: <nadim@symbolic.software>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 2B2C0116863CB for <tls@mail2.ietf.org>; Tue, 14 Jul 2026 06:18:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784035099; bh=/u5q54Pk3T8dCX46ku9/x/37bLE4bI/FiE66Kyw2CZw=; h=From:Subject:Date:References:Cc:In-Reply-To:To; b=Hc5o4yGROvR10O6EM7oE+8hKrIqTQrA6hUe98vkiX+82TKJWCTVmoQ/eHuFf5ttAV HUoD8Yki2g8t9a9gm7meAw/zJA/IXAJvkZhGXFuBncGstA1le28C/jTGN7FyceBox3 k+9ZbAhD295Q1K8mDPqs679omxI1rVRVGtHDl1oY=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.906
X-Spam-Level:
X-Spam-Status: No, score=-1.906 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1, MIME_HTML_ONLY_MULTI=0.001, MIME_QP_LONG_LINE=0.001, MPART_ALT_DIFF=0.79, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=symbolic.software header.b="auy1Xut0"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="lH/z01jN"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ohf2vqDxqk9U for <tls@mail2.ietf.org>; Tue, 14 Jul 2026 06:18:18 -0700 (PDT)
Received: from fout-a7-smtp.messagingengine.com (fout-a7-smtp.messagingengine.com [103.168.172.150]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 04E6E116863C0 for <tls@ietf.org>; Tue, 14 Jul 2026 06:18:17 -0700 (PDT)
Received: from phl-compute-10.internal (phl-compute-10.internal [10.202.2.50]) by mailfout.phl.internal (Postfix) with ESMTP id 088DCEC0177; Tue, 14 Jul 2026 09:18:11 -0400 (EDT)
Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-10.internal (MEProxy); Tue, 14 Jul 2026 09:18:11 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= symbolic.software; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=fm2; t=1784035091; x=1784121491; bh=C3N9AEAVoe tELlC7g1P0c9YCw5bZEfyx390gbzs6Xdg=; b=auy1Xut0YD829tnMPwocU8nEmC G0MZHECGxjDKz5HqmkZpNQach9OhKzkA/o+nfBlPLIzB37v/8r1/yymCcPLxAa/X OUCxk6SUegbOVxEjL3LcngdVNOYImv14HXkz9pn3qg66xRfbYmO756CB/mMOM7u2 nS1Jlx4T4lwbyt5JOKRce254jWNUGJ8YfFI+KRs8iECRtKF7GLWesSRXVD+MV2E9 FqwbbicbSg6gSYSzp8Q6r4Vvj+2UV4bnPr1xrfRde6UtVrBqu2mpwXtoMLAIWKQh zXjUjM53P9NMrgeblTzsVXtWtl3zm0dDr8amdUs3pwk0yTWDAukICypht0Ug==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=1784035091; x= 1784121491; bh=C3N9AEAVoetELlC7g1P0c9YCw5bZEfyx390gbzs6Xdg=; b=l H/z01jN5FXN3pel9tQvRZkpKJVvhqoef/8tdTPvSDtH0axohhLCiEnc0o0hSXSht OQvsVK2obfxfgRrzyV4mo4u0jepoNH/Whe2hE1ziV7mzb6NMjT4EdtdxdoWtuy2y 0AIIAdnPkeTdu76kr5mAdqsyTbl3VcnxkEo3sXj/47djPZxOlqHCtCqLUXT6rmjj Rzp9gCsxIEPa3rmHseefdB0FGCPxYp0B4KFwgfLyuhYlS0g3/Gjw8T3zSDauXeQ2 TgPseVJttRmx/HfeYYuXLI44XRoVufG7YIhKuhK/sF4PbLjMk8Vb3m/ZANhwc4+N LX0l5IGvNn8p/D1Rr4oAQ==
X-ME-Sender: <xms:EjdWanP_31C2sg7qVuZk8Qrrozd5s3CA8oiGuu4yEhjJ_ygSte3vHg> <xme:EjdWanMf5PVWyHbBpxGpnvCGyCme3uEQqsRnX9sKNyqxgY5ipXqoWCJoXcaaOXIHj KaDmaFwalYWJCuLKFV1Cr-GZpJaLXBzBAMQ-ftxKn-orSyd0o93znav>
X-ME-Received: <xmr:EjdWan9V-jZXGa8378g_V7x5SlYEPIb57XtCpL5vtr73ef56nhaQCOkM3yM9v-a_-Yw>
X-ME-Proxy-Cause: dmFkZTF1SV5Auh9vGyuP+gBvlLaRGXrk8iRxG41dCwwdyKfekCs223/NKc7YUnDhiWewg0 mkO459Z84hqicOwOxVcMSOdfFi2LJh/7iXYTjZJ4IYet0W8kUu5BCIM2IAB+WLkyf/hovn JTP9mAsQCMvSTavg1oDe83qlFcOOtMeNV+qsOIxzXhC9rl5IUF12Hm4BuS2VjfNxmgVdA0 nDDXKfPVM4k7Zv+nd7i0HMyBcIxGzQYBphQMvLyo3/YssEygY3pVxLPmTNTcLzysaJFB2A Y9ANUrAviwHg0APMxa/n9LL+Iipnp6I/UGPKBDoN8yWzYLkCAY6X05eiccHU5RJZEa3WV1 uyktv0UP5o2cDOnyrBTQX/RD4XYTjb1SILSaNu8TyAu4ElWogQRTcssMKeDo8CWU2W8QJe xDx37xCAEevxbGYoefKZoy5gisyiH858IQ4RTlV6iAlNLkCt24NkxZOSSDkPfQjM0UV9yf oHRsxocgrhe71+8lJF4Se4eST1ythhUyBv1IMJrexenwObLUCKk/eMRERLCrs5C2B2Cd9y ED/eQHpEcbPqjhfmcxPVJNrI1v+JQSXMcLTPVUK4GyTAoWSAyWBuJxZ40HgtiLcSgTn35H HNHbvDsnMsuFDdxPUYvRD7vpLu4Gug7UcioCVwDBo8MiGvEODOufT7hDrJHw
X-ME-Proxy: <xmx:EjdWaj53w3jmb3eGI2LxcUWmwS6gdze8ncMZDYpAMD5ozaLSQ3hg7A> <xmx:EjdWam3CXeHvfzm3yEhGQ2kVfCglKvjD-YL44YklAA3ZUWoyntospw> <xmx:EjdWaiA03N0ydOyW-qKoqgefAOAFXF6ms1kXlxYsbD97JLAX-5T9_g> <xmx:EjdWag3drrhOb35a93rgYzCd_TNbyMuxzGT71jPMF8jQFFVp6pVnTA> <xmx:EzdWarDTvBXk1AY1-7-mOokAlsllg5mL7noKHywq7QRUtGtsCKGJoAUR>
Feedback-ID: i6d3949ed:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 14 Jul 2026 09:18:07 -0400 (EDT)
Content-Type: multipart/alternative; boundary="Apple-Mail-33FF40A2-619F-4DCC-A83E-21B8A1F0801F"
Content-Transfer-Encoding: 7bit
From: Nadim Kobeissi <nadim@symbolic.software>
Mime-Version: 1.0 (1.0)
Date: Tue, 14 Jul 2026 16:18:06 +0300
Message-Id: <5B34ABF4-D76F-44C9-ACB1-5F1843372299@symbolic.software>
References: <A5C05EAA-3C14-4204-B594-2CD2B73948AD@symbolic.software>
In-Reply-To: <A5C05EAA-3C14-4204-B594-2CD2B73948AD@symbolic.software>
To: iab@iab.org
X-Mailer: iPhone Mail (23F84)
Message-ID-Hash: XI3HOR42DOAWNP555FDXAFJUQOIOTSNM
X-Message-ID-Hash: XI3HOR42DOAWNP555FDXAFJUQOIOTSNM
X-MailFrom: nadim@symbolic.software
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: tls@ietf.org, iab@iab.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Scope of the IAB's appeal response
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/BzLkNXuZlNxSuK13sBqyV9qr8Ls>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hi everyone,

I got an informative answer to my question:

It appears that the appeal was about the decision to adopt draft-connolly-tls-mlkem-key-agreement as a working-group document (which is how it became draft-ietf-...). Now it's about publishing the resulting TLS WG Internet Draft as an informational RPC.

Thanks to the person who clarified this to me. Sharing this here in case others find this helpful.

I apologize for my confusion on this subject and appreciate the clarification. It was an honest mistake.

Nadim Kobeissi
Symbolic Software • https://symbolic.software

On 14 Jul 2026, at 3:36 PM, Nadim Kobeissi <nadim@symbolic.software> wrote:

If the determination of rough consensus of the WGLC from earlier this year is real and legitimate and not overturned or anything like that, then why was a subsequent WGLC held and concluded just last week? Why didn’t we just adopt during the one from earlier this year and settle the matter then and there?

I would appreciate an explanation and apologize in advance if I’m missing anything obvious.

Thanks,

Nadim Kobeissi
Symbolic Software • https://symbolic.software

On 14 Jul 2026, at 2:52 PM, IAB Chair <iab-chair@iab.org> wrote:



TLS WG,

The IAB notes that its https://datatracker.ietf.org/group/iab/appeals/artifact/310" target="_blank" rel="nofollow">response to Daniel J. Bernstein’s 2026-04-24 https://datatracker.ietf.org/group/iab/appeals/artifact/272" target="_blank" rel="nofollow">appeal is being cited in ongoing working group discussion. To prevent that response from being read more broadly than intended, the IAB offers the clarification below. It takes no position on any other matter now before the WG, its chairs, or the IESG.

The IAB denied the appeal. It did not find that the chairs' determination of rough consensus to adopt fell outside the discretion that RFC 2418 affords them, nor that the responsible AD and the IESG acted outside their process role in declining to overturn that determination.

The relevant observation regarding the responsible AD was narrow. The IAB noted that the initial characterization of the adoption call by the responsible AD did not accurately describe the record, and that a more precise account followed. It was offered as encouragement to chairs and ADs to take care when summarizing participant responses. The observation concerned the accuracy of that account, not the intent behind it. It was not a finding that the responsible AD acted in bad faith, engaged in misconduct, or breached the IETF’s conduct norms.

The IAB has also seen its response read as reaching conclusions it did not state. The IAB did not determine that consensus to adopt was absent, nor did it overturn any consensus call. Its response should not be read as reaching conclusions on matters beyond the appeal, including the subsequent working group last call or the fact that a different Area Director became responsible for the working group.

Dhruv Dhody,

(as IAB Chair, for the IAB)

_______________________________________________
TLS mailing list -- tls@ietf.org
To unsubscribe send an email to tls-leave@ietf.org
_______________________________________________
TLS mailing list -- tls@ietf.org
To unsubscribe send an email to tls-leave@ietf.org