From: "Salz, Rich" <rsalz@akamai.com>
To: Eric Rescorla <ekr@rtfm.com>, Sean Turner <sean@sn3rd.com>
Thread-Topic: [TLS] Re: WG Adoption Call for Use of ML-DSA in TLS 1.3
Thread-Index: AQHbri3ExtP8QRMME0yg5TX3YU/pDrOlAt2H
Date: Tue, 15 Apr 2025 17:56:41 +0000
Message-ID: 
 <IA1PR17MB6421C4A836EFE065848C9EF7CDB22@IA1PR17MB6421.namprd17.prod.outlook.com>
References: <07CB46EC-758E-4204-901A-CC8812B33A5F@sn3rd.com>
 <CABcZeBMDKGQtMMaKASsV74U7p-vXQr8Fj+AbqAjHwpsQJY_B9Q@mail.gmail.com>
In-Reply-To: 
 <CABcZeBMDKGQtMMaKASsV74U7p-vXQr8Fj+AbqAjHwpsQJY_B9Q@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?Windows-1252?Q?9lJbbqeis8ZDqCvbmn54PDWy5NJdsWnTFkuwcW+aqr3qMN6BvUNoMW5m?=
 =?Windows-1252?Q?7fiNIRu94mOAUAQeongK1SnQiVfiW/EIAnNCATtnvYt1YUNPYFgW/rBG?=
 =?Windows-1252?Q?6ScfSGuSrNrSzsFT38gPaguAyVEOS/fpyyzUyiP7O2eSLqMTsFq1KpJ1?=
 =?Windows-1252?Q?OyxQmFZowX3jHNW36gb1Nn5k6dNG35hEmLhXCnPbwNUnzM47ThiD5koi?=
 =?Windows-1252?Q?Pfl1J+0v1DSyZlSOypdGGlhqzgJFqlA1TNoFSfv7MIddu0zQnwkAyGc7?=
 =?Windows-1252?Q?xPHYsypAXXoQ/MncVvQOt3OtWEKrHya7cKSs4kL+Y5H+FWsC8jjSwo4h?=
 =?Windows-1252?Q?1M6xoYry9wWaj5j0YIed3TofYC0Lxgx3nvZ6KieQg960r8mFagi1ms8Z?=
 =?Windows-1252?Q?Iiy/0vaTMr+Z/EnYLphUTYTjDktHE46XvZVnWiyJBaV+lzxgUgn4E2uB?=
 =?Windows-1252?Q?cnccp/wpUfydECM98/6+A+XGs1SjB9UdePSlNFPSCIhCIVTILRy8+SzF?=
 =?Windows-1252?Q?SU08bozkhysJFjz5SGH6TwLLukf/yEcbABfpWIq6/QHqEpshnx+Kqrl2?=
 =?Windows-1252?Q?qBOirWXKDRM10xj94hUOy2Cc73LZDgAXL3MDyEUhcc6TV/z/7LXjzXLK?=
 =?Windows-1252?Q?8G8gfqvIo0pPpm1SZdqW3G3yAS4gPGJZSFXJu5ChX2yK5re1pFaIpctv?=
 =?Windows-1252?Q?s3EBUGnxvOjK02gnpViQYhSHc6Qgb+rzLqPGxO8o4PV+suClrXQu6YNH?=
 =?Windows-1252?Q?fizmQ+YCGwdPiuRF398SnEyKwZLP0LSvf/yfeiSqG3h49cEEhJH3HGQ6?=
 =?Windows-1252?Q?lL+snoMorGB1ot1aHYyybJkP8QGQXCzdxfkym0fzi8wysgYAqPSN8vy3?=
 =?Windows-1252?Q?DjlDkQ7j64Hj2e0R7QW/9/4zV4Joac2jtXYdFqr7bCFs1S5Tp2jRgzL7?=
 =?Windows-1252?Q?Gyqd+gWeuHwFtIs2xQgEbKuAHXX5lnxzgHd9jig4z0nS619s3fydbhYk?=
 =?Windows-1252?Q?l0aOSpIYPfwRTZ0/QQjwBVt6BkaUuDTJAd6WXrGAkug7pwZLrdg7X7+1?=
 =?Windows-1252?Q?53lS4fEMr5s6OtCgzSoJ6TXQTcJMX7O1PmqUzWs9td7Pih7tpi+1gnWy?=
 =?Windows-1252?Q?RyGzzhlMgEs7xFVVu4yFRKtaR+GLAplW0HI0P7LbOf9RTcKgDYXmM/4u?=
 =?Windows-1252?Q?vvasj6CwCJ9X4e0rxJjckIFRHCD8CHwIMm5vx4DoU0nj1E6P01G0iVeQ?=
 =?Windows-1252?Q?VkVXTXm6lZQplinryOI5l2muiy8DoYzM7yQCv+FG9LC3PceBmLPuJeMc?=
 =?Windows-1252?Q?QO1T480wWyVl7BKBr02ct6a6XJWtVvBkZMjkP2t1DqO8bAR/vGPGGt9x?=
 =?Windows-1252?Q?r4ZJMbG4WZTP2uzKzpZEPF6aZLQXShsTUzbkT+qiZkxEfCdxR1/KcXE/?=
 =?Windows-1252?Q?O1IJH+2+IjXmxxnM7dzaZXkk0e1DATqZvhfhtkzQQOjuUUSaKi3eh1L5?=
 =?Windows-1252?Q?8Yg9pnPHKfyIGpjl3U1bCix3CldCpCQ4AnzDaXnR8lxHwYQVwfB7zehY?=
 =?Windows-1252?Q?p6lzzD8lCh1RG+4jnSyMvBEysKMcJoQDfIoo0DVQoEkeIu8PTfX7hf11?=
 =?Windows-1252?Q?5Tuqywwz/4we8gEkCpNAVMqNo7pWa8Lf3kghadGajp0TOF0ORVoHS/c3?=
 =?Windows-1252?Q?ySvvl3dC03+0w8iN7vJp1mS0OPH6FFU47b+7G1qIYMNxzdz09hplTojA?=
 =?Windows-1252?Q?7sc3o2HyzydR8sNuWoPAxc93ZZubUxoa8Pbcn82YcZhObcES6K/MYBs/?=
 =?Windows-1252?Q?t5Y/QQ=3D=3D?=
arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
 b=fAAP4QXK4MSJ0nOdZif3fTME4u4b4jwUDnHcerxIDtKr4Col5F2VqU4QObk8wWYArXIqqAX2cbDmsqIslpNVPjqIlc/WSdtjvEmHPsRvhYhV+Uzo2Udff4DIiUhHV3AEoUiojEo0OR/0YjWFH8g44tGlqWNiIrLAiyfj7AKw4kfcRNBlC4xAEF7bPrQ+vqb2J2pDVQWXiHuULfcXLQ2lVw/D2mKEiBB0rywnj2mreHVtkh8QaweHjhYWPU5S/LXko49FxbVK76bIZ+Wv+Nn2A5KXB+d+PT4HFyna2vrQwaGbPLaI9J7xIat/6Y0ks7YVzjZ/0TY2ajiVFFlKo3EQjw==
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector10001;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=eQX+ms8Wp0Jji7KwZ34n+h9uNmzxCOfXst9co9g7sYc=;
 b=RzRI8hRI1wOPXVtsEtxiBH1mDavuqUt5S7CZ/ZMF+yzFvgqjj+zWkuRq7S1+5DMVOeQbZbZB+DQ3UIjoXby3EFJ2CQrRfYOU2Xx7I2wNSM4saUY/poYl7mdowQ7P16Pup1mSj479Ug0n3/DFqwojUNB7aAe6pLHwfI7keaBVE4PHqsQEcLzc2A6tdRKxoZy+DHj5Lg5yKzTSk5VtYz/FY72iTBmFkrdHlB0driPj906TIjACteXeMLqpZGB/IkUGengtQozotn7kuR67ORYxErsrwlJKuyN8bewC0hEN4tybIdjB/2VbWggzYa5BovsV/913Dn5Rq8FdiI86Uqfxgw==
arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass
 smtp.mailfrom=akamai.com; dmarc=pass action=none header.from=akamai.com;
 dkim=pass header.d=akamai.com; arc=none
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=akamai365.onmicrosoft.com; s=selector1-akamai365-onmicrosoft-com;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=eQX+ms8Wp0Jji7KwZ34n+h9uNmzxCOfXst9co9g7sYc=;
 b=aHiurhQNgl6vmOZoY/t+URe2Yl2gMat14odtITh39j1Bn6DUDyYZBlrRbEke/2eQvqODU7sjUxf2kbUqmQWAogvM79ka5cVpL9VgMLlV6SO1rAFj/6o4H/Zsmfmu6wfkfPG6s/DwB1nmB2CDKLEJH5B/d4ZS+AvSLnNChFwvKqI=
x-ms-traffictypediagnostic: IA1PR17MB6421:EE_|SA1PR17MB5092:EE_
x-ms-office365-filtering-correlation-id: 7a57082d-db69-4e3a-67f7-08dd7c46e07c
x-microsoft-antispam: 
 BCL:0;ARA:13230040|10070799003|1800799024|376014|366016|8096899003|38070700018;
x-forefront-antispam-report: 
 CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:IA1PR17MB6421.namprd17.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(1800799024)(376014)(366016)(8096899003)(38070700018);DIR:OUT;SFP:1102;
x-ms-exchange-crosstenant-authas: Internal
x-ms-exchange-crosstenant-authsource: IA1PR17MB6421.namprd17.prod.outlook.com
x-ms-exchange-crosstenant-network-message-id: 
 7a57082d-db69-4e3a-67f7-08dd7c46e07c
x-ms-exchange-crosstenant-originalarrivaltime: 15 Apr 2025 17:56:41.1869 (UTC)
x-ms-exchange-crosstenant-fromentityheader: Hosted
x-ms-exchange-crosstenant-id: 514876bd-5965-4b40-b0c8-e336cf72c743
x-ms-exchange-crosstenant-mailboxtype: HOSTED
x-ms-exchange-crosstenant-userprincipalname: 
 gVeSvR65DWbG+tkdzIz/A8AOFmF8xS+QQDuInNCpu37BXqPKxvXwmeHXx+Wkn8g5iil1gSnvhMxq8ESWNPcHlw==
x-ms-exchange-transport-crosstenantheadersstamped: SA1PR17MB5092
x-originatororg: akamai.com
Content-Type: multipart/alternative;
	boundary="_000_IA1PR17MB6421C4A836EFE065848C9EF7CDB22IA1PR17MB6421namp_"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.293,Aquarius:18.0.1095,Hydra:6.0.680,FMLib:17.12.68.34
 definitions=2025-04-15_07,2025-04-15_01,2024-11-22_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 bulkscore=0
 mlxscore=0 suspectscore=0
 adultscore=0 phishscore=0 mlxlogscore=776 spamscore=0 malwarescore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2502280000
 definitions=main-2504150124
X-Proofpoint-GUID: YEvKeh2mK7UkVs4b_5j-qP3lA4KQ0EZ1
X-Proofpoint-ORIG-GUID: YEvKeh2mK7UkVs4b_5j-qP3lA4KQ0EZ1
X-Authority-Analysis: v=2.4 cv=SsKQ6OO0 c=1 sm=1 tr=0 ts=67fe9dea cx=c_pps
 a=StLZT/nZ0R8Xs+spdojYmg==:117 a=StLZT/nZ0R8Xs+spdojYmg==:17
 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=wKuvFiaSGQ0qltdbU6+NXLB8nM8=:19
 a=Ol13hO9ccFRV9qXi2t6ftBPywas=:19 a=xqWC_Br6kY4A:10
 a=XR8D0OoHHMoA:10 a=g1y_e2JewP0A:10 a=NnIZjWyJuzlkOs6_uuQA:9
 a=pILNOxqGKmIA:10 a=yMhMjlubAAAA:8 a=SSmOFEACAAAA:8 a=p4KB4xziv8SDyjnQakgA:9
 a=SJNBOdAqBu9_PPam:21 a=gKO2Hq4RSVkA:10 a=UiCQ7L4-1S4A:10 a=hTZeC7Yk6K0A:10
 a=frz4AuCg-hUA:10
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.293,Aquarius:18.0.1095,Hydra:6.0.680,FMLib:17.12.68.34
 definitions=2025-04-15_07,2025-04-15_01,2024-11-22_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0
 clxscore=1015 bulkscore=0
 lowpriorityscore=0 mlxlogscore=597 impostorscore=0 mlxscore=0
 priorityscore=1501 suspectscore=0 malwarescore=0 phishscore=0 adultscore=0
 classifier=spam authscore=0 authtc=n/a authcc= route=outbound adjust=0
 reason=mlx scancount=1 engine=8.19.0-2502280000
 definitions=main-2504150126
Message-ID-Hash: 7XFLRRPLKJFSNULONPSUS7PLOGYWLF5R
X-Message-ID-Hash: 7XFLRRPLKJFSNULONPSUS7PLOGYWLF5R
X-MailFrom: rsalz@akamai.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-tls.ietf.org-0;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5BTLS=5D_Re=3A_WG_Adoption_Call_for_Use_of_ML-DSA_in_TLS_1=2E3?=
List-Id: "This is the mailing list for the Transport Layer Security working
 group of the IETF." <tls.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/tls/WGS37urF07ZEqkonRCyTxhF4iZs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

--_000_IA1PR17MB6421C4A836EFE065848C9EF7CDB22IA1PR17MB6421namp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

ZjQcmQRYFpfptBannerEnd
I do not think we should adopt this draft at this time. I would prefer the =
WG focus its effort on key establishment.
Once those documents are complete, we can reconsider signature.

I strongly agree.

It might be interesting to see how often the signature algorithm doesn=92t =
exactly match the certificate signature.


--_000_IA1PR17MB6421C4A836EFE065848C9EF7CDB22IA1PR17MB6421namp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:w=3D"urn:sc=
hemas-microsoft-com:office:word" xmlns:m=3D"http://schemas.microsoft.com/of=
fice/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1=
252">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Aptos;
	panose-1:2 11 0 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	font-size:10.0pt;
	font-family:"Aptos",sans-serif;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;
	mso-ligatures:none;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style>
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple" style=3D"word-wrap:brea=
k-word">
<div class=3D"WordSection1">
<div id=3D"mail-editor-reference-message-container">
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-left:.5in;mso-line-height-alt:.75pt"=
><span style=3D"font-size:1.0pt;color:white">ZjQcmQRYFpfptBannerEnd<o:p></o=
:p></span></p>
</div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-left:.5in"><span style=3D"font-size:=
12.0pt">I do not think we should adopt this draft at this time. I would pre=
fer the WG focus its effort on key establishment.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"margin-left:.5in"><span style=3D"font-size:=
12.0pt">Once those documents are complete, we can reconsider signature.<o:p=
></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">I strongly agree.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">It might be interesting to see how often the signat=
ure algorithm doesn=92t exactly match the certificate signature.<o:p></o:p>=
</span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><o:p>&nbsp;</o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>

--_000_IA1PR17MB6421C4A836EFE065848C9EF7CDB22IA1PR17MB6421namp_--