[TLS] Re: Codepoint registration for algorithms enough?
Richard Barnes <rlb@ipv.sx> Wed, 30 September 2026 20:33 UTC
Received: from mail-oa2-x0e.google.com (mail-oa2-x0e.google.com [IPv6:2607:f8b0:4864:30::e]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id 7C3474B for <tls@ietf.org>; Wed, 30 Sep 2026 20:33:26 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=ipv-sx.20251104.gappssmtp.com header.s=20251104 header.b=WwEiXhj1; dmarc=none; arc=pass ("google.com:s=arc-20260327:i=1"); spf=none (mx.ietf.org: domain of rlb@ipv.sx has no SPF policy when checking 2607:f8b0:4864:30::e) smtp.mailfrom=rlb@ipv.sx
Received: by mail-oa2-x0e.google.com with SMTP id 586e51a60fabf-494ab4d6128so3970291fac.0 for <tls@ietf.org>; Wed, 30 Sep 2026 13:33:26 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1790800406; cv=none; d=google.com; s=arc-20260327; b=dbydDbdRP+Y+GqKO4q7nS0FELVTm6JZlee7FbXIdeH8VtftahrvQI5F7S6j3OMRCcY UuIcKFodvX3SrA2UZ00ao4aAmnxMkg2Mk329mYPWI7NvsR5AatQapaz4zQ13+FmK50+4 sW3dl6Ofr9s9uTiR7iYpaoImRFqcMsIH7hT1q0RLmasdwp6sfcvhS4frraQDG1s0SWPj OpH/zzQPmf7rVIPKy4po30JSJpyP6Kf+aiZsQxAcZBSOQXt8ZR0m/M7cIXqcahXAT8yG HJMEyD+GRG1N0ooh34P4FXKCOvRc6lFdpCm6MQpV4cHugAKSFaJqK0IpmtXE6uvAYNMY I+fg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=7VzhQFAaLFFQr+7MJpiAV1z0GAA99O7gJM+jdocbLXA=; fh=NgBl/7d3hkMnapDeRwKZM2dUtjwPcP1KCRBS4gW/mhk=; b=JPMZj8irND45+ekHMgStsGYMriGNbrGV+/28MdnPladwa5uH6u81dkcKv1F5puk3JH h9F/Jx/8XFxDbrvt+y3m9odsd12JN+HeXZn8Cq4wKS08tjxL3dRI2iuk4gfJ/GKU3CIn zuR5ewofHxwoXyGwU0SAzB2qUIkfgDNmLoX648Ttox0i7AkefrNmpuFZyiFNwMHGxl3t WVUqv9NBDEdPLtSu4qTdgBR0zIqrDJNfrY3muu5P/jw2r4+Jht0SpqZANvEvOzMN/1gy FwQ/vOe7PYfUuF5XqyYtgu4RCmD7Lfj1Q/Ti+f2z7xONguiWn0yb9xZaEqNwaZM+SuiB FleQ==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipv-sx.20251104.gappssmtp.com; s=20251104; t=1790800406; x=1791405206; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=7VzhQFAaLFFQr+7MJpiAV1z0GAA99O7gJM+jdocbLXA=; b=WwEiXhj1hFj7uSRYdmXXnupC37J7Y6J2o28XVW6FmSf9p48E9I6u0+IUUutYNgALcF TEQT2g4prjFuRMip/4wxqeMYqBTMSNLkm28r84+G2+1SPqBU7/RWRbNJ/olPa5zk91CK E25atf9DWymdGRY+jarg+6H88hzugvNDJmyKjHltYx2hQASTp9/iOZQNYvblL8VP6wxE RHmgu1HsYnbYX2jviWdiYWritXwBMxcvaMSGBAEx3khGIJkANvB9V+roxf9Ku9My1TWQ v8NXUAK6Dl9M4zGVeLNQ9MFo5XL0NG73Lv+VjuMnREhjYbH5QV+vas7w1W5tFgPkEC+n 2Czg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1790800406; x=1791405206; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=7VzhQFAaLFFQr+7MJpiAV1z0GAA99O7gJM+jdocbLXA=; b=U8N5J8v+/c+PVyP8UGPDS0TkOaQB1CKI0v47SPSF7OHzYeLW3w7LBX9Jgojayj6Opt ScpJk9lTS70+vXxYJ9U3flH8vyorfNVmFI3P5Nfz9ieFalje1kvuM4QLI8LbqdFwxL1K YhDcrx+E1M5vE+LlKoQvnFHJdsa9PxqHBH1rA+UVglqSeqKBjG0o/OFoxTyKQ4KhN5QG y4xff4XU0rRdLbtw2awPG6zAEa+n/bNBxuDnXTLrZqQGaq8Nfq0u0J37LqEEq6uRXTQ+ vz3dZgPjiUZcWPqzaMb0bzEKyiK70kwXr8VfsAmhtvBwWESQ9ciMGHcLJIQ2jLXX5DaC Vl7g==
X-Gm-Message-State: AFuF++m41x+wSOYrcrjAvSVsfh9I3x7WeFF9bDaqEUMWYHuyJLTUrWKN fdAET21uddynhd8/uCuDaQxquAcQmlialf3AxtquPR3K0/9dTqLf+NBkWallPv8mm7Q2AR8+Q2K 4saHpZzw+QH80PIkeTcL5joX5f7XlF/zDX/2mStcetRsUdLKZ7DFYU4U=
X-Gm-Gg: AYBFou1IYy6FrIcfzVhftaigaae2w5Ryr2mBZQSG57CezfxeG3FRQF2yBNDU29bxYmf ggjYMRvOCDIt4aRtGGhzuo5lOV3NenC0Gu3v2YTSTfMf98Hzv6dr7OlzbDTVI2TSFP7VZfW8tL9 ctGAQ/2nBgn5P5dWATp/81nC+qUD7nLFaIb4K5OsRO4Los92hitYNHZQwKM9BX0Jwm05S5jhFNU PsS5Xl+ami+Spno9yRm2Mq71aMScBHj5vEDXu3B4ijRZL3JXzLuH123tI+/zieehugT8/X5t/f9 iubyavuIInCYThDrPrjWQK0bnCtF6njX2Az2txXhEAev8C9pzhdW8is=
X-Received: by 2002:a05:6808:220e:b0:4ef:e154:4169 with SMTP id 5614622812f47-4f1b4c6b64bmr3656544b6e.15.1790800405672; Wed, 30 Sep 2026 13:33:25 -0700 (PDT)
MIME-Version: 1.0
References: <CACsn0cmJkDmfXVbyimvNpr2NgpooazgZ8sNobfZ7dCQVaSwtdQ@mail.gmail.com> <aryq-7BSXoo_s7pz@LK-Perkele-VII2.locald> <CACsn0cnCFBmFw318EQD4APgfQaJAZvNehfreDZAAddggabg-2A@mail.gmail.com> <ar1A8tbX-Z0rBF9G@LK-Perkele-VII2.locald>
In-Reply-To: <ar1A8tbX-Z0rBF9G@LK-Perkele-VII2.locald>
From: Richard Barnes <rlb@ipv.sx>
Date: Wed, 30 Sep 2026 10:33:14 -1000
X-Gm-Features: AclHuK_iGlfegYpJd9tDgkmcU8q3TH2d4N1VydZo0qyjqrmE7kGiyLow4S9dOAc
Message-ID: <CAL02cgTE3qXSTZvMt-P6+tes3tsSPGhspaM_T8=S3OOd-HyWtg@mail.gmail.com>
To: Ilari Liusvaara <ilariliusvaara@welho.com>
Content-Type: multipart/alternative; boundary="0000000000000b415b065cb936a4"
X-Spamd-Bar: /
Message-ID-Hash: JGWJ4FSMKN3RMY7TFRARKPIUVCX2XYSQ
X-Message-ID-Hash: JGWJ4FSMKN3RMY7TFRARKPIUVCX2XYSQ
X-MailFrom: rlb@ipv.sx
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; header-match-tls.ietf.org-5; header-match-tls.ietf.org-6; header-match-tls.ietf.org-7; header-match-tls.ietf.org-8; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [TLS] Re: Codepoint registration for algorithms enough?
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/RCb85rtWV43VtuQ-qw2xAwfZzSQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
On Wed, Sep 30, 2026 at 1:04 PM Ilari Liusvaara <ilariliusvaara@welho.com> wrote: > On Wed, Sep 30, 2026 at 09:20:06AM -0700, Watson Ladd wrote: > > On Tue, Sep 29, 2026 at 11:24 PM Ilari Liusvaara > > <ilariliusvaara@welho.com> wrote: > > > > > > On Tue, Sep 29, 2026 at 02:53:57PM -0700, Watson Ladd wrote: > > > > Dear TLS WG, > > > > > > > > Is a codepoint registration all that we need for composite certs to > > > > work in TLS pointing to the doc in LAMPS? I'm trying to understand > > > > what content we would need to have here and why. > > > > > > AFAICT, other than the registration stuff, mostly just interoperability > > > and security considerations. Prominent part of security considerations > > > is downgrade attacks (to both traditional and standalone). > > > > That doesn't seem specific to this draft but shared by any enablement > > of a new signature scheme. > > Composite signatures have special considerations with downgrade attacks > (this also interacts with PKI policy), and also considerations with > interoperability. > Really? How do these considerations differ for ECDSA+ML-DSA vs. say Ed25519? --Richard
- [TLS] Codepoint registration for algorithms enoug… Watson Ladd
- [TLS] Re: Codepoint registration for algorithms e… Ilari Liusvaara
- [TLS] Re: Codepoint registration for algorithms e… Watson Ladd
- [TLS] Re: Codepoint registration for algorithms e… Ilari Liusvaara
- [TLS] Re: Codepoint registration for algorithms e… Richard Barnes
- [TLS] Re: Codepoint registration for algorithms e… Ilari Liusvaara