Return-Path: X-Original-To: tls@mail2.ietf.org Delivered-To: tls@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 9CB6811777BB1 for ; Wed, 15 Jul 2026 15:38:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784155117; bh=76gG8tqLJkcj9RNQ44SVs/obdt0j0KcNwmKHF3R0UEI=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=nn8V1htVRR83b1ZBBSEdJ8nRyF96ri5JHfBWQlI3Uap/4VNklKNliOZXDqIh2MLly Jp40hSP2bKDPt4TvogJd55Fov+jJz7E/lsfeK3OdllEnnGtPUKJEptbG6NgshrvWci nd4qi67uQuZJ/C5LPJALCrmCpk2MJkGyu+YKgkYU= X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -2.088 X-Spam-Level: X-Spam-Status: No, score=-2.088 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q_QXOu42kweY for ; Wed, 15 Jul 2026 15:38:37 -0700 (PDT) Received: from mail-yx1-xb12b.google.com (mail-yx1-xb12b.google.com [IPv6:2607:f8b0:4864:20::b12b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 178D111777BAA for ; Wed, 15 Jul 2026 15:38:37 -0700 (PDT) Received: by mail-yx1-xb12b.google.com with SMTP id 956f58d0204a3-66825848551so297562d50.0 for ; Wed, 15 Jul 2026 15:38:37 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1784155116; cv=none; d=google.com; s=arc-20260327; b=BuI1d/sWwVEpPyMZo4xoIRPAKzch4E5LwZY07Dau1aq7nYpqT/f9MONi6JAS4W/gvs WhzbNh3XqcnAcVRy1Ky3uqhTR2M104mup6F5jgUKOusSzonZLCPaeEYyiCakSeOsd9Ab j3SP8YJNmjZ7A0wmVDqcP6K9svx/7ZXwKXZUXsoKyRlYzfh7v/7sL/OFlGVFwuZ9y1nI AdedrzBR0XkwlwtsiN63l07H57xUOkLEY9HecYuyqO142qdKHdm+KXf8W2TUpVbNz2D6 AebOBZCPnOiPkLNHyt28HkqFm0CScPjwwnPgIUuX8sVIwCKU0ZZx9GsbqR6yD57WdDqH eOrA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=/IfbDBkpffeNM5kqbt2vZ0mfsBw3jwJXJn0yYJaajXQ=; fh=BocUowK0P3IpTeGi82pIBqHjGYfKcpgp6sGfrYYZQss=; b=JyK9uxyJQ8B5y1B2Xf2utEzsjABplCi0ZDAU3IxcGzFNooAjQGsFUxXlxq4g6L8Fjs C5pcm9ZphRSRsjPr9zMfwC0unnANcyHgMYvfU1dCvOarDkCMIlCgot3/jYwvnmHHgpdz 75rrMLq1XvN0AfPzsvy015p+KRJxvsk8inckWogPL/Efv7yxGUqbvDw/0q6gXVQkBgns 3i+8YKRqpNYlBn4p5eCd3ycjeJHi8pqUBNd+folN2+4zCx+CAa4Yl+1Lx9e2fHIljnpy a8rq29/gZyFutcDEk8bmQSmypx7GmCnpNELneZe9oCAKrVD9PP/w09rFkmE66j8Qlok6 kFVA==; darn=ietf.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1784155116; x=1784759916; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=/IfbDBkpffeNM5kqbt2vZ0mfsBw3jwJXJn0yYJaajXQ=; b=Nzmi9XBBnkBCgHUmAqcg3Z073sKq0CvclWYrxLCEZXjiZZahRYZlJv5lHnV7yJs9bm 56nRbuDht9s27RinbZSgc2a6jvCtocZSgeVxgMqO9ZTpX+imIk3//gUzDleC7z+FND6J I+Vk4ZqavnzufN+qeceP0nE5sZCkg6lgg92QBTEKj9RYdjGC57cf866Jnx5JbUT3DzDO uwngspUYK2P9MjiISVlAI3JAmSSUwqKnvvNEc0Pe5V+vilY0jQw+si+P6kwSoNsrPjsg XG4NK4oN8Phu+tL0DujIY+Jpg5sGFNayDHQh1DXrlt0/Sa9bphYfdVGaN71C+eRcjY4s v6vg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784155116; x=1784759916; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=/IfbDBkpffeNM5kqbt2vZ0mfsBw3jwJXJn0yYJaajXQ=; b=df0foZ8b2KjFzgYGzLHCCcryWhGPBtD/btsexUKpXlB8yCYT7QCf8mEM2e7A3qYiIU Tn2FPJ5GYWnSyuzBmbOMheveP8b+onB9BBm3WNLyjTspTMN5zPl0KAuZFbiqQQ7y9WMc qVlLeiJhY3BoR/pWb3S9gCmf+wabEjuiYq5d5/xrGrFaJoEHpCmAVx1RPpH1/LWqUGgp 0Da7nzdwfNIpIrrpCoCMl9JT2ApW+CMLO3tdGh5Wb23gVnmDwhlj3r5EO9jcgQl8q8QH ZQpV1uiwSNJeWTuM7FBf4/ZrQM88HcKkTFERiUgVl9+rR9CVoSw1codNt3TblOtULm4m WW3Q== X-Gm-Message-State: AOJu0Yyi3b2VLICGmOdHWms7hT28T5pRrJroyT+oqNJlNB5udFbhpdBA 3G01z5SUYaqACeZilS0u6Qv0VALtbYWIdqhjJikjq3PfRd1HXdyH0ZD9Bt0TJl2GkDAkM9oH/CR 9AYCuuDULegI+wspjPUNg7GUQistNcp+bPfbQ X-Gm-Gg: AfdE7clJ097/pX3C6UYh7ULxDP3RsVuxAav7H6ZVVCedYEo0IipP1qBU43Jrl8bnx81 FB7keICAC46jZhFWr+5YSNxtupWW3SJf8yMxVHTC2XzSeLRtOhP8IH+C1SuZyARYvUikEOUZ2ap 6pCqOO890phEHaF5rrcaF1sTwZFaAGJJB35TS4BPsy9wBybbPunoMjBAe8A/UJ75Q9TSpdF8ME6 ogarV3CU89bJXBlLC7n13ZW0MkfPogYtqU/g3R1UEuWGwZA8pC/w0XswZN5fqU+N1uzKq7n3O5i KxYQyRuMBu1UkuQ= X-Received: by 2002:a05:690e:b49:b0:667:c1b3:d4b4 with SMTP id 956f58d0204a3-668078116c4mr5765077d50.52.1784155116431; Wed, 15 Jul 2026 15:38:36 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Ryan Hurst Date: Wed, 15 Jul 2026 15:38:24 -0700 X-Gm-Features: AUfX_mx3tAoFJC1Onx2f-02gAwAmST6hj07oS1HoI1ywW0lcHkcMxPQKjEWODo8 Message-ID: To: Deb Cooley Content-Type: multipart/alternative; boundary="000000000000f06f650656adfbf1" Message-ID-Hash: 3NN2YJQVUP2MHSVE6NKPB2T4YKMCZRHQ X-Message-ID-Hash: 3NN2YJQVUP2MHSVE6NKPB2T4YKMCZRHQ X-MailFrom: ryan.hurst@gmail.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: TLS List X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5BTLS=5D_Re=3A_Response_to_CoI_Complaints?= List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --000000000000f06f650656adfbf1 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I have known Deb professionally and through the standards community for more than a decade. She is one of the most hardworking, principled, and public-service-minded people I have encountered in this field. You may disagree with Deb=E2=80=99s technical conclusions. You may disagree= with how she has handled a particular matter as Security Area Director. Those disagreements are legitimate, and the IETF has well-established processes for raising them. What is not legitimate is turning those disagreements into insinuations about her integrity, loyalty, or professional history. Referring to someone who completed more than 37 years of public service and then retired as having =E2=80=9Cdefected=E2=80=9D is not criticism. It is a personal smear,= and an especially ugly one. Deb has spent decades doing difficult, consequential, and often thankless work. In every interaction I have had with her, she has shown up prepared, engaged seriously with the substance, and acted according to her principles even when doing so was difficult or unpopular. Deb has earned better than this from the community she has served. Ryan Hurst On Wed, Jul 15, 2026 at 11:51=E2=80=AFAM Deb Cooley = wrote: > > For the record: I have been a Security Area Director since March 2024, > that is 2 years and a couple of months. > > There have been previous inquiries into my ability to perform the duties > of Security Area Director via the SSHM working group, and as part of > complaints against the TLS chairs/AD. Those have been responded to by th= e > IESG, the artifacts are below: > > https://mailarchive.ietf.org/arch/msg/ssh/7KRZCX_bvZWUOG50HqDg_KVT77c/ > > https://datatracker.ietf.org/group/iesg/appeals/ (see artifacts 125/126, > as well as 128/129) > > In addition to the artifacts above, I suggest that there might be people > for whom I have worked with that could give an opinion on my work ethic a= nd > conduct for the last 2 plus years. > > The recourse for anyone who doesn=E2=80=99t believe this is a sufficient = response > is free to take a look at [RFC 8713, Section 7]( > https://www.rfc-editor.org/info/rfc8713/#section-7). > > Just a couple of minor points: > > 1. Retirement means that I don't work for NSA anymore. I earn no > salary. > > 2. Retired does not mean the same as 'defected'. > > 3. My bio is accurate see here: > https://datatracker.ietf.org/person/Deb%20Cooley. 37+ years of service in > Cybersecurity which used to be Information Assurance, which used to be > Information Security, which used to be COMSEC. > > 4. If you read RFC 9151, read all of it. Section 6 and 7 have MAY > requirements which improve interoperability. Note that the draft was > published in February 2021 when Adrian Farrel was the ISE. It was review= ed > by a noteworthy set of reviewers including the late Jim Schaad. > > > Deb Cooley > Sec AD > _______________________________________________ > TLS mailing list -- tls@ietf.org > To unsubscribe send an email to tls-leave@ietf.org > --000000000000f06f650656adfbf1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

I have known Deb professionally and through the standar= ds community for more than a decade. She is one of the most hardworking, pr= incipled, and public-service-minded people I have encountered in this field= .

You may disagree with Deb=E2=80=99s technical conclusions. Y= ou may disagree with how she has handled a particular matter as Security Ar= ea Director. Those disagreements are legitimate, and the IETF has well-esta= blished processes for raising them.

What is not legitimate is = turning those disagreements into insinuations about her integrity, loyalty,= or professional history. Referring to someone who completed more than 37 y= ears of public service and then retired as having =E2=80=9Cdefected=E2=80= =9D is not criticism. It is a personal smear, and an especially ugly one.

Deb has spent decades doing difficult, consequential, and often= thankless work. In every interaction I have had with her, she has shown up= prepared, engaged seriously with the substance, and acted according to her= principles even when doing so was difficult or unpopular.

Deb has earned better than this from the community she has served.

<= p>Ryan Hurst


=
On Wed, Jul 15, 2026 at 11:51=E2=80= =AFAM Deb Cooley <debcooley1@gma= il.com> wrote:

For the record:=C2=A0 I have been a Security Area Dire= ctor since March 2024, that is 2 years and a couple of months.=C2=A0=C2=A0= =C2=A0


There have been previous inquiries into my ability to= perform the duties of Security Area Director=C2=A0 via the SSHM working gr= oup, and as part of complaints against the TLS chairs/AD.=C2=A0 Those have = been responded to by the IESG, the artifacts are below:=C2=A0

https://mailarchive.ietf.org/arch/msg/ssh/7KRZC= X_bvZWUOG50HqDg_KVT77c/

https://datatracker.ietf.org/gro= up/iesg/appeals/ (see artifacts 125/126, as well as 128/129)

=

In addition to the artifacts above, I suggest that there might be peop= le for whom I have worked with that could give an opinion on my work ethic = and conduct for the last 2 plus years.


The recourse for an= yone who doesn=E2=80=99t believe this is a sufficient response is free to t= ake a look at [RFC 8713, Section 7](https://www.rfc-editor.org/info/r= fc8713/#section-7).


Just a couple of minor points:=C2=A0=

1.=C2=A0 Retirement means that I don't work for NSA anymore= .=C2=A0 I earn no salary.=C2=A0=C2=A0

2.=C2=A0 Retired does not = mean the same as 'defected'.=C2=A0=C2=A0

3.=C2=A0 My bio= is accurate see here:=C2=A0 https://datatracker.ietf.org/person/Deb%20= Cooley. 37+ years of service in Cybersecurity which used to be Informat= ion Assurance, which used to be Information Security, which used to be COMS= EC.=C2=A0

4.=C2=A0 If you read RFC 9151, read all of it.=C2=A0 S= ection 6 and 7 have MAY requirements which improve interoperability.=C2=A0 = Note that the draft was published in February 2021 when Adrian Farrel was t= he ISE.=C2=A0 It was reviewed by a noteworthy set of reviewers including th= e late Jim Schaad.



Deb Cooley= =C2=A0
Sec AD
_______________________________________________
TLS mailing list -- tls@i= etf.org
To unsubscribe send an email to tls-leave@ietf.org
--000000000000f06f650656adfbf1--