IETF Logo Mail Archive

[TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3

Stephen Farrell <stephen.farrell@cs.tcd.ie> Thu, 09 April 2026 20:14 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 717F7D9009E8 for <tls@mail2.ietf.org>; Thu, 9 Apr 2026 13:14:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775765644; bh=9NlJV3iNYg+lOC1/u9iNOZqQTc2oOesftCJdyEv23t4=; h=Date:Subject:To:References:From:In-Reply-To; b=JHIFTaaPOBXI2D5XqxPsE35eY6pGlng6EZWaJPwSlNUv8lcYdE9eKXJsx1geYdzp+ npgFTUBQgP7giCSiCbYNa6VJ1WjNMFVXGMtlaVIU8b836f6FrnwoSybPpC6h22dG6+ 952F6Q+AExMIkPwsKWWUIitFyMaT1vPMjzQOXvTY=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ljX-A_eBFd5D for <tls@mail2.ietf.org>; Thu, 9 Apr 2026 13:14:02 -0700 (PDT)
Received: from DB3PR0202CU003.outbound.protection.outlook.com (mail-northeuropeazon11020122.outbound.protection.outlook.com [52.101.84.122]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id C204BD900984 for <tls@ietf.org>; Thu, 9 Apr 2026 13:13:57 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=VWSLZ99iXFs6xrkUchldlCjMTtsJ+Gekg11qOLLqqXJNxFOSjTSxUpbhkYm5qdjaEuDdRx6RQG/LfxpcRvG9aEIOnPAoAy6j0/6dstfglce3ZwVNFm69Z5OkfO3jblkkAM9mxJ5SHPCFZ+6jwbjvBifFLfr7IYU5qOM4N+vqQcWCh+QaG9Dmrvgvc9mla32W+jgNyOpA19h/Q6bkkzZ3hf4IWCSV2Dq22tZ+AWO/ZDw+rgW8jJ6CXA42eiVHzGQoLsBKBt/1XfiMHccPeaXC9k1/0e/vuUYz6FWtJyDeu1/L8IBJxqLAzkQ43WrFAqymdFxkwzIw69W7wz80gJVrOQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=9NlJV3iNYg+lOC1/u9iNOZqQTc2oOesftCJdyEv23t4=; b=qs3Y9frxpoPQ3196V6GE12c7vsr2LVdb6AwnSLfgbCRZ6jgccmgMU1l1H8SQ6L0yRCUFEXO2c6TaszdWwSlASlQmZ4wlMb6i6UCaujcyAekqf2tDUdTCA5WLMJjrBtla+SmqhySiUKGszVgpWUB1kf0TL8EY6zxjCA08lOZpz+vH3AahRakoaRj+jsBnSyWpftxqHt99nKVI+qkMGoP85ElA9k/8goMc6FJ8aOtDJ1nf/w7Bi7KoPbNsGOghmzh8v2n7Jc/VIKvdwwBuA06GCiIq2EYCH3lV5IHU7q/qFEmT4SO4qdim54BAF6XRJVoF+pdaJ8Yn8wYVG2v9uKSHbw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9NlJV3iNYg+lOC1/u9iNOZqQTc2oOesftCJdyEv23t4=; b=FOk+/3mnoh6bEakjDhN2W/HW/0brt0FJ7kY7IgyP1BAVyr0NNP9claywBbgGtPAoxcfPhut4BlUO1PRSbE7ntrVMyhQIyuEcVbBwbHeW4+3hvjzG/KEjRzlppl6e/lQAtpIzHS+dJtbN0HkHAUFU6KhyTxQTUThbaads8gdIG1Cq5zDw79FeNeSphzoxpD+TOtc77WgCQW1aXiWgIRYu3Y6QnM0JiUiqjkOw57g9UeU5LlEW6M06jHFSoNyfjfdaZSW4WutYR454gcbt+TCCoWn8CmIx+Kfq2lqhna6C2fp5LUDcIXurw9+f2gvXBIDerBo7boR39qz7Xa9c1axCpA==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from PA3PR02MB11163.eurprd02.prod.outlook.com (2603:10a6:102:4b4::19) by AS8PR02MB7223.eurprd02.prod.outlook.com (2603:10a6:20b:3f0::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9769.42; Thu, 9 Apr 2026 20:13:46 +0000
Received: from PA3PR02MB11163.eurprd02.prod.outlook.com ([fe80::71cc:8d7f:5cb5:3772]) by PA3PR02MB11163.eurprd02.prod.outlook.com ([fe80::71cc:8d7f:5cb5:3772%5]) with mapi id 15.20.9769.018; Thu, 9 Apr 2026 20:13:46 +0000
Message-ID: <25c8d414-e4c8-455b-bd64-28132615ba75@cs.tcd.ie>
Date: Thu, 09 Apr 2026 21:13:42 +0100
User-Agent: Mozilla Thunderbird
To: Sean Turner <sean@sn3rd.com>, TLS List <tls@ietf.org>
References: <16CF0FDA-7263-461A-9F2B-D37DBEAF5DD9@sn3rd.com>
Content-Language: en-US
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
In-Reply-To: <16CF0FDA-7263-461A-9F2B-D37DBEAF5DD9@sn3rd.com>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------hIW2HOWkfPFbOinmXT9Wn7Ua"
X-ClientProxiedBy: DB7PR05CA0008.eurprd05.prod.outlook.com (2603:10a6:10:36::21) To PA3PR02MB11163.eurprd02.prod.outlook.com (2603:10a6:102:4b4::19)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: PA3PR02MB11163:EE_|AS8PR02MB7223:EE_
X-MS-Office365-Filtering-Correlation-Id: ce20b358-38f2-4453-f4c2-08de967480fa
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|10070799003|4022899009|786006|19092799006|366016|1800799024|22082099003|56012099003|18002099003;
X-Microsoft-Antispam-Message-Info: F+ZZmJEB5h75clBO+NbjGWGfC56UqdhAZEwsYADmI5RRjz51xRgZqIoA9qmM/TMS2JPjcAwK7KXpzpWD7gNkXhyTvN+vNMrMlvELm9X0ZKXIifFe0ifWZdaetg5ezJyesFGluFIU1aHW/9e0schFljojUQ7EWeDC5+8utcMNvlANmbWub5DXTaMyrwRes9S2Q2IM5+OZtXyxEFPn9dJFY8UwskX6KUG5mf9Khqbz8l60HT/4nGuNcKwvx9WhnL5Jq1jaYBBUstEQ67G9eM2ZlZyl7bwNX15al/YDaiGDxX+IZXsMIhzwKVzF1eRd9TLZ2oGISCwT1T1K2SduxwUOO0xnTwA7lczEdv3jh674hTfoSt1iIX2S4TFaD//0eLRVdJI9P1STLV1q2jSCw+GJTkCRp69+C1mGKG5qqOH+iel5QZk/W6HhLFm4sSWnmyST466lRMEflsNdgs50nvzCaO1Ti89KWVrksHtu+qnQXcKRtuyU5Xw7uGMXuPWEquK+JRj1brGVwzEoFyqMiUiLKJZZCPZQzeTBS2OXxnPKs53NFEaPgkut9fAwTSz3KGa533UQ9+fS8J1e3GgXzrD80eivPAz+CqP6lBjR2huA9l4S7GdxtrgBRO73HVN5cZG2BY+CpSQF93/WdHy0M1xJ/BN0lvL0/4YXqBXYGfk/zUvBNQg1294CEQ8oTOf3VmewwbGJVqbGyWDDBfASwqYHPstl76778jQ+hbjO2FL03Fw=
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PA3PR02MB11163.eurprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(10070799003)(4022899009)(786006)(19092799006)(366016)(1800799024)(22082099003)(56012099003)(18002099003);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-MS-Exchange-AntiSpam-MessageData-1: ivUG0MVeuScF9w==
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: ce20b358-38f2-4453-f4c2-08de967480fa
X-MS-Exchange-CrossTenant-AuthSource: PA3PR02MB11163.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Apr 2026 20:13:46.2046 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: k9g89adSSneNATbOe2BatuNrt5wHnnk0l4y09Xd/yEqQa132oCb/es427w7vxaXx
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR02MB7223
Message-ID-Hash: IUSMDHGS65GWX72CMZGQVJMFTYYBWQ3F
X-Message-ID-Hash: IUSMDHGS65GWX72CMZGQVJMFTYYBWQ3F
X-MailFrom: stephen.farrell@cs.tcd.ie
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/IiYTPypMQwhZTaAbH65yZxdiuNc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hiya,

On 09/04/2026 20:30, Sean Turner wrote:
> This is the working group last call for Use of ML-DSA in TLS 1.3.
> Please review draft-ietf-tls-mldsa [1] and reply to this thread
> indicating if you think it is ready for publication or not. If you
> do not think it is ready please indicate why. This call will end on
> April 23, 2026.

As you might expect, I do not think this should be published
at this time without there being guidance as to usage. From
my POV the same goes for any RFC for any newish pure PQ.

In contrast to KEMs, IMO the guidance for signatures in TLS
would be to just not deploy them for now, but only to do
experiments in case this is needed in future.

Cheers,
S.

> 
> REMINDER: If you have not done so recently, review the TLS WG's Mail
> List Procedures; see [2].
> 
> The Chairs, Deirdre, Joe, and Sean
> 
> [1] https://datatracker.ietf.org/doc/draft-ietf-tls-mldsa/ [2]
> https://mailarchive.ietf.org/arch/msg/tls/
> ucdImHExlbOf4Q3BCG81gjzi2xE/
> 
> _______________________________________________ TLS mailing list --
> tls@ietf.org To unsubscribe send an email to tls-leave@ietf.org

v2.46.0 | Report a Bug | By Email | System Status