[TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3

Michael StJohns <msj@nthpermutation.com> Mon, 04 May 2026 16:08 UTC

Return-Path: <msj@nthpermutation.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 88C94E8D0238 for <tls@mail2.ietf.org>; Mon, 4 May 2026 09:08:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1777910883; bh=vrf+g9eFMXSsHcdnXYN49KBl3VPHD1BDF0ptFtVGoDQ=; h=Date:Subject:To:References:From:In-Reply-To; b=O78EDFOupwEIMxZGhwDiRuLIaWvp6yVdRjPw9Nlq6o9gWabDsi7DcXcVSvuP03oeL grhG56gzWEjFkMi7khrKZ+obBpbGf4UF6iycKalZneZr9oxZQkFBt/csBPPU82nB8B 1hbGYXeurTb28Je2s/2LW18KNS6y1oburC9LCETA=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=nthpermutation-com.20251104.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XKPkkISmTF96 for <tls@mail2.ietf.org>; Mon, 4 May 2026 09:08:03 -0700 (PDT)
Received: from mail-vk1-xa34.google.com (mail-vk1-xa34.google.com [IPv6:2607:f8b0:4864:20::a34]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 18B4BE8D0232 for <tls@ietf.org>; Mon, 4 May 2026 09:08:03 -0700 (PDT)
Received: by mail-vk1-xa34.google.com with SMTP id 71dfb90a1353d-5673804da95so1455580e0c.0 for <tls@ietf.org>; Mon, 04 May 2026 09:08:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nthpermutation-com.20251104.gappssmtp.com; s=20251104; t=1777910876; x=1778515676; darn=ietf.org; h=content-transfer-encoding:in-reply-to:autocrypt:from :content-language:references:to:subject:user-agent:mime-version:date :message-id:from:to:cc:subject:date:message-id:reply-to; bh=UsNizNV2XHmRbSTFr6RhiEf2908YXUhWaAfyYRuUKwI=; b=Zsk2vfORV/yOeJw1Alu2wJmzLDB6HUwkDjy1k8UAKoG9jOJwdsr78eD7Kov2+YZRKT n2WQp511MBL6XhDK04kx/3Fveyu5OniWI9+pnstaVtT5acXmF2CcDaNVPBKjAIioilOB 1/CtmrNFx7rDFQPdPmNy/LNfXP213Cu5ZNFRY/pwaFL4b9xfH/T454cADaUjh7bn7qBP BB1becxM5Ft5Qv0OAnuZkjXbJr4ufXSs7zBQTpDF3GPU2QSVLnVibsS+duKGRjxclauU Zqe4TQrF5qo9ilBfDGQK2GVs8SUEO1kWvXMECBDaxi5zvhvoCC8lSEpgeJ9Nitknc+7B 30gQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1777910876; x=1778515676; h=content-transfer-encoding:in-reply-to:autocrypt:from :content-language:references:to:subject:user-agent:mime-version:date :message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=UsNizNV2XHmRbSTFr6RhiEf2908YXUhWaAfyYRuUKwI=; b=Qtw6v9tfwC405Ad3s1yHwDq3Lt+xkRWykQQcpVC7eDX+evPMWv7oGrLYEnqLtTj6Pm 2pe1Z3/Caukth8fqdV7pOdF2zdcymgS6iuHGa3TY1crj/P4wFaVZzwB7787Aave3q2Rs 126ufRRfMzUoqG/NUBHh2uFkKs3j1eQs8N1/zY+/0i998AfjQBCcJENPwuk7phyxWree 7lsBNi0zloeYrwuCpkILg1SBncECGEWF7J0G/uywMf5971UdaR9QVNL+mWwMHmQ0pvR8 qX+2zFiaIQoD3/DdTkkJIMRu2qfYZbJCsxmMEUzJgIqQsZPD66poiEdUGJFJ1N10nTEV StSg==
X-Gm-Message-State: AOJu0YyWBuNr/KdEZ1WNJMpuScNHCfnMDwejoY8MFxd90xkVWe5MLwMM gBmONVXTC7WI6WecI5mToCegvU9+m5rc4pbS4SFKDPeQAkzOKAfqmwkk2UorqflOv3RasO8Ia81 O84bkzYQ=
X-Gm-Gg: AeBDietACpBCSJNiQwtKC+B35Un7QVjehkIL1zG0rgyrqIkO7w/hu59YoTu5vwV5BMC JIkC+TrRFqonM8ppcaav62lpcAZRZR+IEoOLfZJL0vjt80Ccji8xljUKUAMq0woqXifJnsQ1nFe 1NW3rOycuet8Qo3yvGPksL8qFDkJEXe2vnoNfjLb5ySKSa61S/WPwHq3KB5s68m9hbaCcX/c8p9 DsoTVwwOZzTrFQXMgbS1pzq1P7ls2QFEfupakRC+aJR6D+/C/NGazF4yGUZJ1HAUTZ7MuLAhuRI V+J96ciGv1C87cEdatNEu6gYTXnL5zUHhKCUi6n/TZJins6ajgnkKp8sb1bAbCmhJ81635l8sy4 oCyC2uSwW354lrh/PM1eZZ6jkfJ/h32ujVfQGa82tpQdc1JCCsqxj/zgw38P3cIBK2p5mvWSiEr flMonS6ztoofxvuKigpt8z0/Ml20jG1XGeRYaFf5C/H8L5kyKj+oQf1klnAGmTHhPVJ2H82LDdA g==
X-Received: by 2002:a05:6122:e18c:b0:56e:f1c7:cdbf with SMTP id 71dfb90a1353d-5750c98adf5mr4611030e0c.9.1777910875582; Mon, 04 May 2026 09:07:55 -0700 (PDT)
Received: from [192.168.1.21] (pool-108-31-82-55.washdc.fios.verizon.net. [108.31.82.55]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-8b53ca982a1sm138602746d6.38.2026.05.04.09.07.55 for <tls@ietf.org> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 04 May 2026 09:07:55 -0700 (PDT)
Message-ID: <3ca3880d-c08b-4104-8e2c-cf230a0d6d38@nthpermutation.com>
Date: Mon, 04 May 2026 12:07:55 -0400
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: tls@ietf.org
References: <f1dce979-023f-4756-bd8a-58fe6201bf94@cs.tcd.ie> <90f2c421-9398-494a-8940-44fea9e991f4@tu-dresden.de> <CABcZeBOsR05ppKAzB088+KPHRBJAUJr+T3wx8fCo+G+K8BdBmQ@mail.gmail.com> <CAF8qwaCsr5MSLoyS1Y-OzjO_ejZrKqfZMsLRi2_LDs9ddwLf3w@mail.gmail.com> <AS4PR07MB8825348270D422465253B63689342@AS4PR07MB8825.eurprd07.prod.outlook.com> <C3F7BE58-9CAA-4562-B153-AD7F618F6465@vigilsec.com> <CAPxHsSKakNmRzW1OayqcJvB66C1sXaxCgm2-a+=ztAXAqHK8bg@mail.gmail.com> <6acf7e19-c63b-4c1c-91ff-76c032e975e8@tu-dresden.de> <CAPxHsSLY4owoBVOTWNaR1=prW_oEaDD1nDdDvAnoE1ZGG6r_Pg@mail.gmail.com> <b4da126b-17c1-43ba-ad17-760611cb240f@tu-dresden.de> <afiCQBp5L84aXAIR@LK-Perkele-VII2.locald>
Content-Language: en-US
From: Michael StJohns <msj@nthpermutation.com>
Autocrypt: addr=msj@nthpermutation.com; keydata= xlMEaYFkXhMJKyQDAwIIAQEHAgMEOdOOntc+rmV7lEMu7/N40GZj92v3Adfmv2aM5c+d8E8O JkeckP4/VEuGbS1X9f8eMQXlZ1HP+5wXd0MEXgP9ks03TWljaGFlbCBTdEpvaG5zIChLZXkg Zm9yIHRvZGQpIDxtc2pAbnRocGVybXV0YXRpb24uY29tPsKTBBMTCAA7FiEEZa5rMVt/UsI1 H75faOOlrKh630kFAmmBZF4CGwMFCwkIBwICIgIGFQoJCAsCBBYCAwECHgcCF4AACgkQaOOl rKh630lP4wEAoV3d9ShCq/OW/uVaVolebc2vzqMyzxYb5cWTq7H0F0wBAJe+PhUWULDMpwIY 8QyRKcUk0M3ESCBrn6YNw1gfhQQtzlcEaYFkXhIJKyQDAwIIAQEHAgMEnFdeZEzyxCp87sqf v8PyE9E2UJpY2spRMmp8YGg2pSwW0ExAJd/ucqn7BVJJuwKI+ZsFnya2yMneNrFC9ZRpJAMB CAfCeAQYEwgAIBYhBGWuazFbf1LCNR++X2jjpayoet9JBQJpgWReAhsMAAoJEGjjpayoet9J ifwBAJOUOlX+49Si1O7xkQpsdWud7YBmWkV7jWBqXQhU1vxlAQCSQCT4g9hwV2bHDrT3UJ2Y k6wVu0KD6I/E/t6hrdcRcg==
In-Reply-To: <afiCQBp5L84aXAIR@LK-Perkele-VII2.locald>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
X-Antivirus: Norton (VPS 260504-4, 5/4/2026), Outbound message
X-Antivirus-Status: Clean
Message-ID-Hash: DACZVXWNPYOHIBDEMPCFOWJ3HNW7MFUS
X-Message-ID-Hash: DACZVXWNPYOHIBDEMPCFOWJ3HNW7MFUS
X-MailFrom: msj@nthpermutation.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/NX37PVYFJHaCOJ8H4Vzt9zRNtBc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On 5/4/2026 07:25, Ilari Liusvaara wrote:
> That section is titled "Why Hybrids?". There is no section "Why not
> Hybrids?".

As an aside - these are generally the exact same thing in English.  Both 
are usually arguing FOR the proposition.  The first is usually arguing 
on the merits, the second is usually arguing that there's nothing better 
given the opposing arguments.

If you mean instead "The case FOR Hybrids" and "The case AGAINST 
Hybrids" - those may be better section headers.

I take no position in whether another section is required.

Mike