[TLS] Re: Confirming PQ+T Signatures Consensus

[Chase Abbott <[e-mail]>]

Thank you for un-noising the discussion(s).

1. Should the WG work on PQ + T Hybrid Signatures for TLS?
      Yes, but not exclusively — composite should be the default, with an explicit path for PQ-only where governance mandates it.
2. Should the WG only work on one: -pqt-dual-certs or -composite-ml-dsa?
      Yes - composite
3. Should the WG work on: -pqt-dual-certs?
      No
4. Should the WG work on: -composite-ml-dsa?
      Yes - scoped to handshake negotiation only, with composite signature encoding/OIDs deferred to LAMPS; aligning with Dr. Schmieg's 2026-09-29 comments.

Thx,

-Chase


From: Sean Turner <[e-mail]>
Date: Monday, September 28, 2026 at 09:53
To: TLS List <[e-mail]>
Subject: [TLS] Confirming PQ+T Signatures Consensus

CAUTION: This email has been sent from an external source. Do not click links, open attachments, or provide sensitive business information unless you can verify the sender’s legitimacy.


At IETF 126, the chairs conducted a series of polls [1] to determine the way forward for PQ+T hybrid signatures after hearing from the -composite-mldsa [2] and -pqt-dual-certs [3] authors; you can watch the setup, authors presentations, and the polls at [4] from around 0:16:47 until 1:08:00. The polls' results showed in-room consensus to 1) work on PQ + T Signatures for TLS and 2) work only on -composite-mldsa. The chairs now need to confirm this consensus on list. We are going to do this by asking the four questions that follow. Please take note of the take note of the following:

1. Framing of the questions is found in this deck [5]; in case it is/was not clear a "Yes" on Question 1 implies WG adoption of a draft.
2. Again, a "Yes" for 3 or 4 implies you are in favor of adopting the associated draft as a working group item.
3. Based on the responses we got during the session we only asked the 1st 4 questions in [5].

Please provide your answers to the following questions by 12 October 2026:

1. Should the WG work on PQ + T Hybrid Signatures for TLS?
2. Should the WG only work on one: -pqt-dual-certs or -composite-ml-dsa?
3. Should the WG work on: -pqt-dual-certs?
4. Should the WG work on: -composite-ml-dsa?

Cheers,
spt (for the chairs)

[1] https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fpolls-126-tls-202607241600%2F&data=05%7C02%7Cc.abbott%40f5.com%7C77780fbe439e4d62909608df1d80f9d5%7Cdd3dfd2f6a3b40d19be0bf8327d81c50%7C0%7C0%7C639262111926555838%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3j2%2BCnKAj%2Fx8vbOe5W7CtBmRaw9wRmBEb0r238KPts0%3D&reserved=0<https://datatracker.ietf.org/doc/polls-126-tls-202607241600/>
[2] https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-reddy-tls-composite-mldsa%2F&data=05%7C02%7Cc.abbott%40f5.com%7C77780fbe439e4d62909608df1d80f9d5%7Cdd3dfd2f6a3b40d19be0bf8327d81c50%7C0%7C0%7C639262111926579046%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=NA59oKh779q22av0a%2Fk9qRREWLc%2FbPl0batviNfXBCY%3D&reserved=0<https://datatracker.ietf.org/doc/draft-reddy-tls-composite-mldsa/>
[3] https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-yusef-tls-pqt-dual-certs%2F&data=05%7C02%7Cc.abbott%40f5.com%7C77780fbe439e4d62909608df1d80f9d5%7Cdd3dfd2f6a3b40d19be0bf8327d81c50%7C0%7C0%7C639262111926593913%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=CBqAEh1kZmAcCN9hy%2F3OZFDVmtGQgriIh4bQV%2BAAIJg%3D&reserved=0<https://datatracker.ietf.org/doc/draft-yusef-tls-pqt-dual-certs/>
[4] https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DQp1s1UMmhTI&data=05%7C02%7Cc.abbott%40f5.com%7C77780fbe439e4d62909608df1d80f9d5%7Cdd3dfd2f6a3b40d19be0bf8327d81c50%7C0%7C0%7C639262111926608224%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=p0fmfuTborx7UhIZxsAHqEsrHb%2Bb8kUhf%2BjLnqQbEe8%3D&reserved=0<https://www.youtube.com/watch?v=Qp1s1UMmhTI>
[5] https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fmeeting%2F126%2Fmaterials%2Fslides-126-tls-framing-pq-t-signatures-for-tls-00&data=05%7C02%7Cc.abbott%40f5.com%7C77780fbe439e4d62909608df1d80f9d5%7Cdd3dfd2f6a3b40d19be0bf8327d81c50%7C0%7C0%7C639262111926622199%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=K41yg1qzh2pB1r1DDRPozk8armNEM4lRPKvnDuG6%2B1s%3D&reserved=0<https://datatracker.ietf.org/meeting/126/materials/slides-126-tls-framing-pq-t-signatures-for-tls-00>
_______________________________________________
TLS mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]