Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
From: "Blumenthal, Uri - 0553 - MITLL" <[email-masked]>
To: Yaakov Stein <ystein=[email-masked]>, "[email-masked]" <[email-masked]>
Date: Mon, 29 Jun 2026 15:51:37 +0000
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>

>> * For the time being, hybrid cryptography appears clearly less secure than solo post-quantum cryptography
>> I do not support the publication of this document.
>
> Less secure but should be used ?

Hybrid will always be less secure, if (a) you agree that CRQC is coming, and (b) your data will remain sensitive through that time.

Therefore, IMHO it should not be used — but unlike some others on this list, I want those who have reasons to use Hybrid, to be able to do so, without having to convince me that they truly really want/need it.