[TLS] Re: Confirming PQ+T Signatures Consensus

Daniel Van Geest <daniel.vangeest@cryptonext-security.com> Wed, 30 September 2026 12:15 UTC

Received: from MRZP264CU002.outbound.protection.outlook.com (mail-francesouthazlp170100001.outbound.protection.outlook.com [IPv6:2a01:111:f403:c207::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange secp256r1 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id ED10E50 for <tls@ietf.org>; Wed, 30 Sep 2026 12:15:53 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=cryptonext-security.com header.s=selector1 header.b=vvCNhmkZ; dmarc=pass (policy=reject) header.from=cryptonext-security.com; arc=pass ("microsoft.com:s=arcselector10001:i=1"); spf=pass (mx.ietf.org: domain of daniel.vangeest@cryptonext-security.com designates 2a01:111:f403:c207::1 as permitted sender) smtp.mailfrom=daniel.vangeest@cryptonext-security.com
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=MNce3l1H6/wdXl2HZHbh3qzhkCUaoxOmu/pwWeoT65RuagFm9phxuILi1HgFa7PRKOm3152lFxSsbPS/TK9uzqFKcQ/wWJ2Kbvo3iVNQyAb0oy+hD84R+PPnIS2F9oI3Z/Hk4ZIroaqzRmyh1ysXtnUibWKTnw036PW7WMuaDVC2SACmKcmNczF2/HAewKQOhmS6Z1fx1bPjWWFQJeZE8zxYA7MXxZg0sTbkApZf1KU8QQ+blWihc+p/OWZc6BJ2A91zAW0BPfSUOaJX+JgEQ2qkqgdq02e4HOSZ8+ZgWa3BCCeP9wArwJrXGEY4VvnvFkg6BmdNOyWLBgpYxtmE+w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=SlRHf9R+0CxDNnm1Iivo6LFFTytgQY2b2G+aLmIbRS4=; b=H2PQvK2AKCJFrdn/OH4vsmMbrX6ZzVDAFzjUZ9Co2xLgQy9KKHyuxtJ6oaI8y6TGA6fAyqzRi1JUSjks0OJ3IOilASKw80IeSTkFxhC/xMMVRURONdSt1jh4lE15yZSn8YzCIcGdVdo05dnu8hA6t24//tyVg8dQtu4uqJM9ttecXAbriivF8c14WkBu1bRogj8ov08Lmta2LiT0T14EFxIf7mGLsBPLq0RWyBvtR6Hs9+bK2Hepvju1Lye+5U+t88nb4I2X3+iBKxBiCOEDv4TzThRRR1TmO6vjqcZeijlRkC+DGYdHbKhmRh04W3t3uKDMzxo+aKxmPjdvKT4Kkw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cryptonext-security.com; dmarc=pass action=none header.from=cryptonext-security.com; dkim=pass header.d=cryptonext-security.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cryptonext-security.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=SlRHf9R+0CxDNnm1Iivo6LFFTytgQY2b2G+aLmIbRS4=; b=vvCNhmkZaTXtztrA5F6LPUJ8UFaxQuS8zvlFCAFgNJ9lR0z3Psf6wiCIS39ACNuLJU5Mlht7/pmpfRf0tRZRq3HMZoBVyho2b+1jjDQ6J8JtAIUXCBga55Gi9CT5hC2aaLeOABalUH4iIGL4gA1tpjjMEDhHpi5DL/NO7gAyRORHmV2Ts+uwX/q38uI6KvI7rxGAb9XYvL22uSr6UmnnpmHgYTOsbCh+yBqYzzCqg5cakNxcy0xeZ5asxMf8WT94OIlsUpEInhJy4nMmBkM4SNOBlgQQHCPPZVRb2YUhVv7hwFqbcRndQ05ipZyFN8wUFM71ks+FEB5oE5wEBS0PDQ==
Received: from PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:55a::5) by PARP264MB5408.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:3f3::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.472.15; Wed, 30 Sep 2026 12:15:42 +0000
Received: from PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM ([fe80::87e8:c70b:3b90:e83d]) by PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM ([fe80::87e8:c70b:3b90:e83d%4]) with mapi id 15.21.0472.015; Wed, 30 Sep 2026 12:15:41 +0000
From: Daniel Van Geest <daniel.vangeest@cryptonext-security.com>
To: Sean Turner <sean@sn3rd.com>, TLS List <tls@ietf.org>
Thread-Topic: [TLS] Confirming PQ+T Signatures Consensus
Thread-Index: AQHdT2nY+Y5HPrIl30q9fliT/YhGoLbnC8qI
Date: Wed, 30 Sep 2026 12:15:41 +0000
Message-ID: <PA0P264MB692566CE094C718DCDAB2EBDB68B2@PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM>
References: <A383CF85-CF66-4A3D-AFBC-3F2CCFEE265C@sn3rd.com>
In-Reply-To: <A383CF85-CF66-4A3D-AFBC-3F2CCFEE265C@sn3rd.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PA0P264MB6925:EE_|PARP264MB5408:EE_
x-ms-office365-filtering-correlation-id: 50e940cd-1573-4e38-a4c9-08df1eec8bd6
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|366016|1800799024|23010399003|4022899009|11063799006|10067099003|8096899003|56012099006|18002099003|22082099003|38070700021|13003099007;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(1800799024)(23010399003)(4022899009)(11063799006)(10067099003)(8096899003)(56012099006)(18002099003)(22082099003)(38070700021)(13003099007);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_PA0P264MB692566CE094C718DCDAB2EBDB68B2PA0P264MB6925FRAP_"
MIME-Version: 1.0
X-OriginatorOrg: cryptonext-security.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 50e940cd-1573-4e38-a4c9-08df1eec8bd6
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Sep 2026 12:15:41.6535 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: da4a2df1-4b1b-489d-a7f4-224b58fd4200
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: +zmLk7kb3Q5BBR+/5apQxxR22gNcKpNin7RroD5X9qDEyYOoiFCOFyssODdmpNOaeiCpMv9fE7lhPhRWA5CLCv9HfnjGurpSK7fqfAJ0ePeuH8GMv+luslJtIxAmhPlH
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PARP264MB5408
X-Spamd-Bar: --
Message-ID-Hash: WMABOH6O36KSPRET3FMA3ROX43AI6AYQ
X-Message-ID-Hash: WMABOH6O36KSPRET3FMA3ROX43AI6AYQ
X-MailFrom: daniel.vangeest@cryptonext-security.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; header-match-tls.ietf.org-5; header-match-tls.ietf.org-6; header-match-tls.ietf.org-7; header-match-tls.ietf.org-8; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [TLS] Re: Confirming PQ+T Signatures Consensus
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/DkDb-jqKa-Dcvg5OMHXxI_ACBVc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

  1.
Should the WG work on PQ + T Hybrid Signatures for TLS?

Yes

  1.
Should the WG only work on one: -pqt-dual-certs or -composite-ml-dsa?

Yes

  1.
Should the WG work on: -pqt-dual-certs?

No

  1.
Should the WG work on: -composite-ml-dsa?

Yes



________________________________
From: Sean Turner <sean@sn3rd.com>
Sent: Monday, September 28, 2026 5:52 PM
To: TLS List <tls@ietf.org>
Subject: [TLS] Confirming PQ+T Signatures Consensus

At IETF 126, the chairs conducted a series of polls [1] to determine the way forward for PQ+T hybrid signatures after hearing from the -composite-mldsa [2] and -pqt-dual-certs [3] authors; you can watch the setup, authors presentations, and the polls at [4] from around 0:16:47 until 1:08:00. The polls' results showed in-room consensus to 1) work on PQ + T Signatures for TLS and 2) work only on -composite-mldsa. The chairs now need to confirm this consensus on list. We are going to do this by asking the four questions that follow. Please take note of the take note of the following:

1. Framing of the questions is found in this deck [5]; in case it is/was not clear a "Yes" on Question 1 implies WG adoption of a draft.
2. Again, a "Yes" for 3 or 4 implies you are in favor of adopting the associated draft as a working group item.
3. Based on the responses we got during the session we only asked the 1st 4 questions in [5].

Please provide your answers to the following questions by 12 October 2026:

1. Should the WG work on PQ + T Hybrid Signatures for TLS?
2. Should the WG only work on one: -pqt-dual-certs or -composite-ml-dsa?
3. Should the WG work on: -pqt-dual-certs?
4. Should the WG work on: -composite-ml-dsa?

Cheers,
spt (for the chairs)

[1] https://datatracker.ietf.org/doc/polls-126-tls-202607241600/
[2] https://datatracker.ietf.org/doc/draft-reddy-tls-composite-mldsa/
[3] https://datatracker.ietf.org/doc/draft-yusef-tls-pqt-dual-certs/
[4] https://www.youtube.com/watch?v=Qp1s1UMmhTI
[5] https://datatracker.ietf.org/meeting/126/materials/slides-126-tls-framing-pq-t-signatures-for-tls-00
_______________________________________________
TLS mailing list -- tls@ietf.org
To unsubscribe send an email to tls-leave@ietf.org