[TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3

[Bas Westerbaan <[e-mail]>]

We have a duty to be clear and helpful to downstream users of our
standards. Being explicit that ML-DSA is not supported in TLS 1.2 and
before is part of that.

On Fri, Apr 10, 2026 at 4:33 PM Muhammad Usama Sardar <
[e-mail]> wrote:

> On 10.04.26 16:25, Jack Grigg wrote:
>
>
> On Fri, Apr 10, 2026 at 3:21 PM Muhammad Usama Sardar <
> [e-mail]> wrote:
>
>> On 10.04.26 15:53, David Benjamin wrote:
>>
>> This was discussed at the meeting, in meeting chat, and on list. We
>> agreed we will not provide PQC for TLS 1.2. We need to actually do that.
>>
>> I may have missed why we "actually need" to provide PQC for TLS 1.2.
>>
> You are misreading David's sentence. The "that" to be done is the thing
> agreed on, which is "not provide PQC for TLS 1.2".
>
> oops; sincere apologies; and thanks for correction. Then I believe my main
> point still holds: we need to remove everything about TLS 1.2 from the
> draft. Is there a disagreement on that?
>
> Best regards,
>
> -Usama
>
> _______________________________________________
> TLS mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>