[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-05 (Ends 2026-02-27)

[John Mattsson <[e-mail]>]

Simon wrote:
>Finally, I worry that due process is not followed since relevant
contributors are prohibited from participating, which subjugate others
to not feel at liberty of expressing similar opinions, resulting in a
non-transparent process that invite questions if this can be considered
a fair and open process.

Unless I missed something, _one_ individual has been _moderated_ for
30 days due to intentionally continuing to post IPR statements to the
list. My understanding is that emails without IPR statements will be
released to the list. The moderation period appears to end in
just a few days, well within the WGLC timeframe.

https://mailarchive.ietf.org/arch/msg/tls/LHeWv-fwBrN6NC-JjC2F49DXIps/

Given this, I do not see how contributors who are not intentionally
planning to post IPR statements would be subjugated.

The IPR statements were clearly disruptive to the open technical discussion

https://mailarchive.ietf.org/arch/msg/tls/INgh1tIvU6uoc4Bp36-iuBBIOH4/

Additionally, public accusations that those supportive of publishing
standalone ML-KEM are corrupt NSA collaborators have likely subjugated
others to not feel at liberty of expressing similar opinions.

https://blog.cr.yp.to/20251123-corruption.html

Cheers,
John

From: Simon Josefsson <simon=[e-mail]>
Date: Friday, 13 February 2026 at 00:41
To: [e-mail] <[e-mail]>
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-05 (Ends 2026-02-27)

I don't think the TLS WG should publish this document.  Pure PQ KEM's in
TLS comes with cryptographic risks, and the risks aren't sufficiently
motivated by reasonable needs here.  Instead this seems politically
motivated.  Let's try to make sound engineering decisions in the IETF,
not act as a political lobby organization.

I worry that the particular construct in the document violate the ML-KEM
patent license.  There should be a IPR disclosure on this document for
the Kyber patents, as I believe authors are aware of the patents.

This is a document that is reasonable to publish outside of the TLS WG
since there appears to be deployed implementations of it, and having
documentation for interop reasons is useful.

Complaints raised in earlier WGLC's still remains, and should be taken
into review during this WGLC too.

Finally, I worry that due process is not followed since relevant
contributors are prohibited from participating, which subjugate others
to not feel at liberty of expressing similar opinions, resulting in a
non-transparent process that invite questions if this can be considered
a fair and open process.  Further reading:
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FOpen_standard%23Comparison_of_definitions&data=05%7C02%7Cjohn.mattsson%40ericsson.com%7C4f360a61ff08439070cb08de6a903a0c%7C92e84cebfbfd47abbe52080c6b87953f%7C0%7C0%7C639065364868168696%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=A5fSFiCHAWdG6xgw5PwvM%2BUXWyp3ViGgdt04K2ZpO5I%3D&reserved=0<https://en.wikipedia.org/wiki/Open_standard#Comparison_of_definitions>

/Simon

Joseph Salowey <[e-mail]> writes:

> This message starts the second Working Group Last Call for the pure ML-KEM
> document (draft-ietf-tls-mlkem-07).
>
>
> The file can be retrieved from:
>
> https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-ietf-tls-mlkem%2F&data=05%7C02%7Cjohn.mattsson%40ericsson.com%7C4f360a61ff08439070cb08de6a903a0c%7C92e84cebfbfd47abbe52080c6b87953f%7C0%7C0%7C639065364868182541%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=DBx3nPW62JmwmbVYq5rDYK%2BtC%2B%2BtkskQ%2BXnTeQenIvs%3D&reserved=0<https://datatracker.ietf.org/doc/draft-ietf-tls-mlkem/>
>
> The diff with the previous WGLC draft (-05) is here:
>
>
> https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fauthor-tools.ietf.org%2Fiddiff%3Furl1%3Ddraft-ietf-tls-mlkem-05%26url2%3Ddraft-ietf-tls-mlkem-07%26difftype%3D--html&data=05%7C02%7Cjohn.mattsson%40ericsson.com%7C4f360a61ff08439070cb08de6a903a0c%7C92e84cebfbfd47abbe52080c6b87953f%7C0%7C0%7C639065364868192270%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=KBQwKVL6%2BzN8wP0CMqLuWJm%2Bq6t95Xne7v4tmvTzJJ4%3D&reserved=0<https://author-tools.ietf.org/iddiff?url1=draft-ietf-tls-mlkem-05&url2=draft-ietf-tls-mlkem-07&difftype=--html>
> <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fauthor-tools.ietf.org%2Fiddiff%3Furl1%3Ddraft-ietf-tls-mlkem-05%26url2%3Ddraft-ietf-tls-mlkem-06%26difftype%3D--html&data=05%7C02%7Cjohn.mattsson%40ericsson.com%7C4f360a61ff08439070cb08de6a903a0c%7C92e84cebfbfd47abbe52080c6b87953f%7C0%7C0%7C639065364868201890%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=PO1jw0%2FImemrP6Kdp%2FED%2BbB8FzIElJaskR9WODDs7fM%3D&reserved=0<https://author-tools.ietf.org/iddiff?url1=draft-ietf-tls-mlkem-05&url2=draft-ietf-tls-mlkem-06&difftype=--html>>
>
>
> The main focus of this WGLC is to review new text providing more context
> around the use of pure ML-KEM.  For those who indicated they wanted this
> text, please let us know if the new text satisfies you and if you support
> publication. This working group last call will end on February 27, 2026.
>
>
> Thank You.
> _______________________________________________
> TLS mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>