[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

Eric Rescorla <ekr@rtfm.com> Sun, 05 July 2026 17:28 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 25BB110F317FB for <tls@mail2.ietf.org>; Sun, 5 Jul 2026 10:28:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1783272496; bh=tMPXrryKV3M44l5TC4OzabP2qzhbcsILpO6l0XM6QJk=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=H4dcH7Zoxauo2LRdY6ppig8WTHG4vjL0JUqRE6ZAuOZkhrScLchJ4sjS4qF4kU31H 3zZogJAgbwSb8FYj+fwxUlPd8XgaoSbcGnU66v93PPe4NEVt1tLjmh0NX9M34w2lt9 F7StU7QN+8hjDwJ4ZdR2Ze0wFMojgB8UHjGrWzFs=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20251104.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kvr1ERMOrTvm for <tls@mail2.ietf.org>; Sun, 5 Jul 2026 10:28:15 -0700 (PDT)
Received: from mail-yx1-xb12c.google.com (mail-yx1-xb12c.google.com [IPv6:2607:f8b0:4864:20::b12c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 9900A10F317F0 for <tls@ietf.org>; Sun, 5 Jul 2026 10:28:15 -0700 (PDT)
Received: by mail-yx1-xb12c.google.com with SMTP id 956f58d0204a3-6662551100bso3349164d50.0 for <tls@ietf.org>; Sun, 05 Jul 2026 10:28:15 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1783272495; cv=none; d=google.com; s=arc-20260327; b=Dw36RLbvzPFfmsQ8mn4vmRvO7A95fz2Sg/SQCLO61rw+TN1/vfxf794Hocz6fTZKUS Xvg3xwIcSZ0VOlEc3m0RXAvin96Mi2lzvebmSt3cdo/W/HIW665SdrG6XfBiy7vw72s3 GVUns0JXbYSza9g5taynEfBzUZnhm8XxG/RC7r97hA6wro90RXVz2drx8L9zaxegTiYI 3x5QntcfXFMd8kBjWP7cmPxGVJ/RlCelbUeYsJWscSNdSuznVeqUZ11zWD/ePhaP37k/ UlQn0JaCg6pnBhM2md1Ll5o5p2UrSuhmn7cppCx204PGr/+lwPjnQailnIM5btiahN8Z dR4g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=peXzYJRkqgihzOppWIbO2IC7toxIj3Y+udhRjp1OrQg=; fh=MxsQN9p5BeyCJR+kGEfevyl/ExigedO/6h3dKzGAsfo=; b=TNQl8lPDeLRUk1wS1Sd6bvKdjwM7lKIP95magnDPRuxl20gJt66sJuHtstWolBkmXb vxBUypqRyyWtiDg0F8kdZ9AnztsvPeVtr9gwX26tjAi7/pBiu0+DljSENQqI3Q0mnFac uvQUGcTUhAkrBYp4ERzA1i6D10HmkH8OkdLi7/MEcG4Gi/CM4kILTmSKYMPXHqvhhkG6 QEXaocZwiBuP+6HOW8iwWqiZGY97wWUMmmpobqsh5TSaNxMt2lj4StlsTZrgvFlI3ROR kjYx3FVlPp9f5r7MHU2H/5v4vlyvZPxMZ99LnskgOUplYpdhUrS5tRSN4bbODZXIFLqm oeKg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20251104.gappssmtp.com; s=20251104; t=1783272495; x=1783877295; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=peXzYJRkqgihzOppWIbO2IC7toxIj3Y+udhRjp1OrQg=; b=Nw1meOgv7DkbsirLAX3CymB2+bYvgwfG07iqmQA7tBREhyI0KRXKAqvyZuCPVO7eLb Gn5D/QpDXh9k5ks6WUuPtV/HFtHLh2pCXe/41UWr+yccjjsc40obbpR1Sj/Ob8S/VIn3 0nEpCFnfvcy72UDKpneQkPJ5+wb0J5wXz5s8RfkI2f85Zgn9DD71Ose9d4dN6FuUQgUq oFx648VoBXxK+PWuqVzegZ9DLX5XhkJ+Anle7B05BcFvHqby7XvsZJpM0oqBlp/GDlVM /zRkq5HtohuRmJq5UX0+nKEw7TZ7wsZ2wRywr7laJ3LuLyNfyQqJND6GT0XJc2g22uXa KyOg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783272495; x=1783877295; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=peXzYJRkqgihzOppWIbO2IC7toxIj3Y+udhRjp1OrQg=; b=Ae4iJ61x30jJWOLZ/O/SWN6FkyDSVNjdNimne/eLyhdubHnRlxYoPa6VWCSSs4uXVb RhOHvNIKMY+xdPWYX+eZNThbn1f3EJIncscUG7Wi7y27aQZJEHahvojtQew63YAF1xdU r3eT++vwqKOtHwFeGV8T8T8uB2ATbi16CQlEmjNthz/P3JYGYhXQ6JtTCfwsUXo2XzXf Jio2yfY+sKEXlAFAyxM7N95+3JJnn/NbQEYL6NA9BqCG9M+KBS6uUZqGSBwcZjtO7mn3 woMWcrpUfw8ZjYs+Nz9BHSyjNtEp9brb6/20ZXyI0OHjApS+2WX43PwMbsuHgvYt/etE CRIg==
X-Forwarded-Encrypted: i=1; AHgh+RonqAvatfOGgvDaPyOlugWvTUzPdT0KbydT21x8UQHxRts3Zy/dNjHcGQbbv3Y8iRFwAQA=@ietf.org
X-Gm-Message-State: AOJu0YydUYVQ9y0Br5xhZUmD7DFDb6nnrS6IK62awcbl9F2mX8Jd9q1B ovew68kOWRGW+bhg3YxVr3vJ3n/RuXnAICI4OHw2MW3FRqeRZHOVtUmtstG2uSI5Clbq7IaJHUa Y+d9FIdTFck6z/hIdthb+I2jiiFgu82PNUUWVwyyfVIAnaPpDB43l
X-Gm-Gg: AfdE7cny31bZzv5dab2YQ/QPmf9ajtEkisi7wXkWTGa3mrmajYF+78U5FVYJ5nSJEqo jMsx9WrMjWOnqpm86K7upNjz1TQ6zrC/CoVdbD/csnYlzHFCE1Di659H9uRVmNlg2GNuUwSYU05 shiwP+bZ/aOYmZ4sWTIaWaa+Lp63zXu9QUfTRMoYJxefM7P46ijbHfjvm/++S1skssNuKewOTXa sILA+3pAYxMY5IYPxiet38iL/C/+wzVWOwRtnpctIRPj+HEtcJelyyOKys5Ji7OYW5Hcfjveelx m7amu365v5/Gsr1x4NZB5iU1ZLNFULsLMvv1AlnKxkicxSTzhABp9QQSJfy+eJFWPQDI9chBlOi 35ZH9mD5W9KU=
X-Received: by 2002:a05:690e:480f:b0:664:ae68:c9fd with SMTP id 956f58d0204a3-66652f40f1cmr5621715d50.67.1783272495039; Sun, 05 Jul 2026 10:28:15 -0700 (PDT)
MIME-Version: 1.0
References: <178231320760.1520243.5914961961176039994@dt-datatracker-f9b87776f-8pmmg> <LO0P123MB399432655F4343DDCF3991748FF62@LO0P123MB3994.GBRP123.PROD.OUTLOOK.COM> <359785FB-9811-415C-8C62-BD1DF25B85DE@symbolic.software> <FAD9FCF2-217F-4AD2-A065-B633F2F26780@kamilner.ca> <2EA38F5C-9516-465F-9AA5-4413C229673A@joseon.com> <TO1PPF1F9B62E537336C3160522DE4827A1C8F22@TO1PPF1F9B62E53.CANPRD01.PROD.OUTLOOK.COM> <ACB703BD-B515-4852-96EB-7753803DD753@joseon.com> <MN2PR17MB40310236D8AE9AA8C1D9D125CDF22@MN2PR17MB4031.namprd17.prod.outlook.com> <0D101757-C729-4B0B-9AD0-82EE89C0452C@joseon.com>
In-Reply-To: <0D101757-C729-4B0B-9AD0-82EE89C0452C@joseon.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Sun, 05 Jul 2026 10:27:38 -0700
X-Gm-Features: AVVi8Ce84SsvOfa0PUIxJnylj8hGkLEAR-n_HPya_QLa_ycXA-C4DqIhjDtGU8A
Message-ID: <CABcZeBO3VwLYtYWMYkUtDwa+JUu0LRzs=-YMNv5bvwxnP8HN3A@mail.gmail.com>
To: Andrew Lee <andrew@joseon.com>
Content-Type: multipart/alternative; boundary="0000000000009ad7ba0655e07b85"
Message-ID-Hash: 7XOVA57BAP2WFN5BJAD6VY6LG3I64GUM
X-Message-ID-Hash: 7XOVA57BAP2WFN5BJAD6VY6LG3I64GUM
X-MailFrom: ekr@rtfm.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "Hammell, Jonathan F - [he/il]" <Jonathan.Hammell@cyber.gc.ca>, "tls@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/LFhWHDkILFFinDp83hIo7AIZr-0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On Sun, Jul 5, 2026 at 10:02 AM Andrew Lee <andrew@joseon.com> wrote:

> Hello, again, Mr. Salz!
>
> I never said RECOMMENDED=N means flawed. I said it means not recommended.
>
> On Jul 5, 2026, at 9:54 AM, Salz, Rich <rsalz@akamai.com> wrote:
>
>     If the "Recommended" column is set to "N", it does not necessarily
>     mean that it is flawed; rather, it indicates that the item either
>     has not been through the IETF consensus process, has limited
>     applicability, or is intended only for specific use cases. …
>
>
> Your own quote says N indicates the item "has limited applicability, or is
> intended only for specific use cases."
>
> Jonathan said the Cyber Centre will not recommend one over the other. That
> means Canada plans to treat a limited-applicability, specific-use-case
> option as equivalent to the RECOMMENDED=Y hybrid.
>
> That is the very definition of ignoring the flag.
>

Without taking a position on whether CCCS is ignoring the Recommended flag,
the fact that some set of entities chooses to ignore a flag does not make
it "meaningless in practice" as you assert above.

-Ekr