[TLS] Re: Codepoint registration for algorithms enough?
Watson Ladd <watsonbladd@gmail.com> Wed, 30 September 2026 16:20 UTC
Received: from mail-ed2-x10.google.com (mail-ed2-x10.google.com [IPv6:2a00:1450:4864:33::10]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id E2BAC50 for <tls@ietf.org>; Wed, 30 Sep 2026 16:20:21 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=gmail.com header.s=20251104 header.b=rkRVXjs2; dmarc=pass (policy=none) header.from=gmail.com; arc=pass ("google.com:s=arc-20260327:i=1"); spf=pass (mx.ietf.org: domain of watsonbladd@gmail.com designates 2a00:1450:4864:33::10 as permitted sender) smtp.mailfrom=watsonbladd@gmail.com
Received: by mail-ed2-x10.google.com with SMTP id 4fb4d7f45d1cf-6a60591ae54so8891175a12.3 for <tls@ietf.org>; Wed, 30 Sep 2026 09:20:21 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1790785221; cv=none; d=google.com; s=arc-20260327; b=pbwaVYQRFHYy04eyBx87St1M4NzXHrX12wCuD6uetgGm5VJQnxLw6cXvwQdK2hmqaU wgsetYWESBbZlrF+aKSMJuJKTjcj4z/gCypkn261JPVvL2uXawcgd79mBqg29cNMmZly XbYKabHHa9QI9YlXZHMDORg5YzCYdQvD0FGUm0KpXg04EkTmi7A3CLgX/14eTd2Mm/72 Gu1VhaTc4TZ10v/Hc5ec1CF/vQb9oCAgr/w6AOk4KQimlAC6/fPYj0Cxw33gFcny7F6F RGlhaZDFN8oBw26SlxaWqekVisTb5mAd3ryLqNWbXYebyoMDcbFhCw3a8rhx3pQfJSuC SZ2Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=MQ74tuxSRK6FpuC6vmmlxiNc5ezFVDp95aWr39+Pb0Q=; fh=NgBl/7d3hkMnapDeRwKZM2dUtjwPcP1KCRBS4gW/mhk=; b=Aki/GSb+RimRytX8+qimGSaZVgm7B4h6CEPMrkP/LQaWFsus4xLu2a8H1A7ZIaAooT fstfEtDNWTHQ8Yqj8yr5CsSOw1r6jWErjbYEpoo5isa+yCEF4hAPWA5xK6pW0nH9+9/x FfK0PrIrxwrX16HUPJjXLARx4IorkFIwXu+JbR3ihYpLdUUmdDlikhiNkSqB0t92iGII oXSt5YwzeNKbRejWk3Cu4LQQH4Xnki9/pEu/PE0SxlfpyY57FG7DI4VKReM4HUtGMyp3 KtcdsH8G7+bMaXMmoJH01pkQohIOcoFPwPPtQQfD5FSALiRhqLYvEUf0uXH0eZYzaDNC WF0g==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1790785221; x=1791390021; darn=ietf.org; h=content-transfer-encoding:content-type:cc:to:subject:message-id :date:from:in-reply-to:references:mime-version:from:to:cc:subject :date:message-id:reply-to:content-type; bh=MQ74tuxSRK6FpuC6vmmlxiNc5ezFVDp95aWr39+Pb0Q=; b=rkRVXjs2cTXx1kG2Xdg5urwLC164hNT7a1wNcGFKELGgLeNZvWTLeblRgFPpaj23eL 3ewx9fj4Ji4L84oEr9c6JH52Cdk+lkkZ1rpTSxJL+xyvA21cNa2Qh9JPAEpWZwXFx1O7 LLx7Ulld8srLYbcOwOor4c1/taZKCVwkROvK71LEz4QT/MKOD78n7fq4F9PobSvhxnXx OxvKVgOAX6HAs5bAN/qavyNB65KKXyw2gkHoYqGXLVvgx0wrOsL16+9ZzPa9mktZuMhH QRfT4XcwPk0/jOIq6f8WtX5O+KLFKEHvsP648Xpl3q2YYU+l8QnuJLM79xdu0p4woIt1 CHAQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1790785221; x=1791390021; h=content-transfer-encoding:content-type:cc:to:subject:message-id :date:from:in-reply-to:references:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=MQ74tuxSRK6FpuC6vmmlxiNc5ezFVDp95aWr39+Pb0Q=; b=cVpmhWpI2zwvhpHMajgdnrvwRRVQU/CZuv2KpZm3smndELFWgajQt/fsYw63SRpNDS Jg1IGwHQRIicvzGSUycXZDbvcPA2SKFeBTv1Ji8vB5quznMM6hI3k8FnkaHVSzNrlMie Bi/T9VtCaN/72rszECamfh+IGZmq25bRCW3GTQ4Trb77vnoDJF0E1aRRJBCnwpBZTTfH 6wYAZ+MzswSMKML3/H3O+Zn+A1/NtiQNwgPR9dWPnD3N3krAg/Bf+ABEaDV8EH5yIsSv 9d4bMZkkku9lBELR3s0sr8/WQs1vrS2n7iOza3dQ1GHGj3RN6h9Mv7UcnoHg6fnJEBA3 1Z7Q==
X-Gm-Message-State: AFq9FYJgGp2mk9HGGDrUIV1QQAl1ejg9oaD32gldFGOvXvO9spFgaRkn pxFG28lY1mOVR5PDdEn7IJDSu2BX1kyappMfe17t4pBbUkPWNkjF7erGz08ZotyPru9O/zMf1xw thgiETk/dCxeD01CGjlW63vaaVsV2hbI1TakU
X-Gm-Gg: AYBFou2DS6PbWuYScIuLKqgaDNQnQsTRYtavkEqWIvULEDBrd49tKBHQT0DyVE5ZzpU 0NrwZ6kdMXj5AItbTxNqPRxXIWWiJT3OJbYeo4S1RWEKVAf+IXiKFZ1ksQ32jNvDc6StAfpkKmE paGfcX55oEthQUdGr7ZTiDUn0uH9z9ZlsXjtoOpflbHdPbTpOMEk7NPvmzOhWlFyqAx3gsYqtt1 JwrH04m8yOYVEfHMLmEB5aDom0uqKDelyUKwNZsQXoacMdkg8ikobkkCF+Ee6we52q2Zvsc4oE7 iDKTIoOAQsiWR0gFl010/gerYnyA8JJb9jK1y+fdRzSHZTsPWOqRkNo8vOG7zfX158yJIncP1eN J/YJZ/evM/PyJCrm6IkcqT3AmwwBSsLJqhPfqhBv1n+1HbMtxqrPm0+uQCPDJJpval0NS27RpS5 8=
X-Received: by 2002:a05:6402:5d3:b0:6ac:b85d:10f1 with SMTP id 4fb4d7f45d1cf-6ae198c85ffmr1511233a12.11.1790785220376; Wed, 30 Sep 2026 09:20:20 -0700 (PDT)
MIME-Version: 1.0
References: <CACsn0cmJkDmfXVbyimvNpr2NgpooazgZ8sNobfZ7dCQVaSwtdQ@mail.gmail.com> <aryq-7BSXoo_s7pz@LK-Perkele-VII2.locald>
In-Reply-To: <aryq-7BSXoo_s7pz@LK-Perkele-VII2.locald>
From: Watson Ladd <watsonbladd@gmail.com>
Date: Wed, 30 Sep 2026 09:20:06 -0700
X-Gm-Features: AclHuK-8WsJqO0_IUqcWyRmFLGQ4VxL2id6w8e6Lc2OpIUAGO6ypujXstDCHOtg
Message-ID: <CACsn0cnCFBmFw318EQD4APgfQaJAZvNehfreDZAAddggabg-2A@mail.gmail.com>
To: Ilari Liusvaara <ilariliusvaara@welho.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Spamd-Bar: -
Message-ID-Hash: 2OVG7VGBRIDAFLYPYD2SIGNK5GXNPEMJ
X-Message-ID-Hash: 2OVG7VGBRIDAFLYPYD2SIGNK5GXNPEMJ
X-MailFrom: watsonbladd@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; header-match-tls.ietf.org-5; header-match-tls.ietf.org-6; header-match-tls.ietf.org-7; header-match-tls.ietf.org-8; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [TLS] Re: Codepoint registration for algorithms enough?
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/qACxhom2m7-91NCx2oPvNq0ZFc8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
On Tue, Sep 29, 2026 at 11:24 PM Ilari Liusvaara <ilariliusvaara@welho.com> wrote: > > On Tue, Sep 29, 2026 at 02:53:57PM -0700, Watson Ladd wrote: > > Dear TLS WG, > > > > Is a codepoint registration all that we need for composite certs to > > work in TLS pointing to the doc in LAMPS? I'm trying to understand > > what content we would need to have here and why. > > AFAICT, other than the registration stuff, mostly just interoperability > and security considerations. Prominent part of security considerations > is downgrade attacks (to both traditional and standalone). That doesn't seem specific to this draft but shared by any enablement of a new signature scheme. I.e. draft-barnes-tls-this-could-have-been-an-email applies. > > > > > -Ilari > _______________________________________________ > TLS mailing list -- tls@ietf.org > To unsubscribe send an email to tls-leave@ietf.org -- Astra mortemque praestare gradatim
- [TLS] Codepoint registration for algorithms enoug… Watson Ladd
- [TLS] Re: Codepoint registration for algorithms e… Ilari Liusvaara
- [TLS] Re: Codepoint registration for algorithms e… Watson Ladd
- [TLS] Re: Codepoint registration for algorithms e… Ilari Liusvaara
- [TLS] Re: Codepoint registration for algorithms e… Richard Barnes
- [TLS] Re: Codepoint registration for algorithms e… Ilari Liusvaara