IETF Logo Mail Archive

[TLS] FW: New Version Notification for draft-sheffer-tls-pqc-continuity-00.txt

Yaron Sheffer <yaronf.ietf@gmail.com> Sun, 19 October 2025 07:50 UTC

Return-Path: <yaronf.ietf@gmail.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 3214976E4308 for <tls@mail2.ietf.org>; Sun, 19 Oct 2025 00:50:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M6dSvDPPCVPM for <tls@mail2.ietf.org>; Sun, 19 Oct 2025 00:50:22 -0700 (PDT)
Received: from mail-wr1-x430.google.com (mail-wr1-x430.google.com [IPv6:2a00:1450:4864:20::430]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 218BD76E41F4 for <tls@ietf.org>; Sun, 19 Oct 2025 00:49:22 -0700 (PDT)
Received: by mail-wr1-x430.google.com with SMTP id ffacd0b85a97d-3ece0e4c5faso3227861f8f.1 for <tls@ietf.org>; Sun, 19 Oct 2025 00:49:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1760860155; x=1761464955; darn=ietf.org; h=content-transfer-encoding:to:references:message-id :resent-message-id:in-reply-to:thread-topic:subject:from:date :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=/Qaynj09Lwv7O4wVqS1JlUUt2NBXtjpcXCL/SXXd+EA=; b=GQcne4nxu3F06v3uUCagxmf6J0jF1GQPVRPKIaR5AVs+dfdHZi1W2tkpNF8qHcN+Vp 34/aZYWVqyWkBFSzofPkkyW4OXzaZwKhqpHY0nq3S1hhEftihs7MberpQwXbDiOxiGgN 6ISMR6qlx0BCf2GZgEzqxnLZPjwu09DCmMvLoVmR0p9z0jRfGdlSixH5cGBua1zUPdqy hxl6zEZko5b0Y3yWfyiykUg7hMfUn5EKTVh5JAXddavE9PSGj6Xg+ioOOXgjgMyNQg46 201Y+5Xcj9X9XNzYnIM9o3w0bFqSnPiYNXKIiGdl77DTgOzLxAzuUcEtT2rzCYPlJO9+ yCCg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1760860155; x=1761464955; h=content-transfer-encoding:to:references:message-id :resent-message-id:in-reply-to:thread-topic:subject:from:date :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=/Qaynj09Lwv7O4wVqS1JlUUt2NBXtjpcXCL/SXXd+EA=; b=LDvP7hd/F8QBXe+miTvsFxluwIFxlIKgH0Uy1cPB3ZCKKcRtIzm0XojF0Vq3poM4Wl Z5grzOsI124jmUPK2FbwQZTOkFpYtXk1SJzWk0pyfOAaFdE4axm0nCNllUMKYzXyUcn9 g7N5JnhDuCajbYb/qP9bgfBSbdhcCqyyMMl3bdsvMYuUc4U+kXKFXN17I44eyj5V64PA Df1DQ3kL2UzGhp4kJFqPE0X7Wx++KEHQvAwhcdcM310frdB1iHBWw6fDE63oGyVA+mnC WHeJ+vP7ZvRPqc7jC+7CNId8b1ORM09EwMydgHr/jVVxe6P4MsfAMajc7XefNIwEaXDy YNOg==
X-Forwarded-Encrypted: i=1; AJvYcCVwL94ckE4C9O2KphBn7Th8RfejITIouXeVYQl8je+Zffg5GD4av4sUK59BsgFgSJkVybE=@ietf.org
X-Gm-Message-State: AOJu0YyKDSKtPYXpNQrBZPfGX2J6IlIvwbiOEncShfZ/WncGN80Tblce mnI8h8kZWRzXlaJmz9Z/k802SmC+f6t3uCl9ua/o8lNkz9umQYzP9F0FvkJtbUNza+5pYA==
X-Gm-Gg: ASbGncuMa9XEdyFAxtWpX4jF2x1qQzhno6xhrNkWI7Xx6l1rkrnJykmIYnts4mTSO1C nFVbvl3/shdFah0YLeOWkEjOhj9E2oobcSPzg225j1Y+CvwI6lD/Bessf8ZwSJSf1CBSetZBmqg m1RampbHcwh277zr371ojY01h7RfBNaNzPLXQk+XgOr9eYw+3APmGnA6S/i5psgmZj01jjEo2Z4 kpzkrogZ9SyQ/6zphshkeo3GyXpdbUMXMo3+6KMMkVdM/qFmVo6zI7YOPmQb2764s9nQtYndsEM qfHn5mFvRTe3ZLh4NPJnbsI3aKsJhd2RwEBvryyEqj3TVZaI7XIlIdNFbnK2ofKu9o+/a9xwHhq ac6Eqjpzjp0FqctFrPskzxyT0MesJzK5kgEPM5zSE1GT6uiHGEIESdgsl+x1b8rf81MPcFtaUR9 4kAebpP0bIXC0rifDjwC8daMr8PzTyUqaxAUhby335Mm0bgqP2k35uQga4eAX0cQ==
X-Google-Smtp-Source: AGHT+IENSm3rPqE6KEbHnN6FT2P7+rMdAJT5QkT1/oJOL8x34jt9GFI89399kfaxFd8qtZsXh5ws4g==
X-Received: by 2002:a5d:5d10:0:b0:427:a34:648f with SMTP id ffacd0b85a97d-4270a3464d2mr3751579f8f.49.1760860154383; Sun, 19 Oct 2025 00:49:14 -0700 (PDT)
Received: from macos-F7LQR2FV6V (IGLD-84-229-146-73.inter.net.il. [84.229.146.73]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-427f009a75bsm8998918f8f.23.2025.10.19.00.49.13 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sun, 19 Oct 2025 00:49:14 -0700 (PDT)
MIME-Version: 1.0
Date: Sun, 19 Oct 2025 10:49:10 +0300
From: Yaron Sheffer <yaronf.ietf@gmail.com>
Thread-Topic: FW: New Version Notification for draft-sheffer-tls-pqc-continuity-00.txt
In-Reply-To: <176085494745.1955446.13815832468506887894@dt-datatracker-84f8f646b-tg6mn>
Resent-Message-ID: <176085494745.1955446.13815832468506887894@dt-datatracker-84f8f646b-tg6mn>
Message-ID: <D3A2AFD5-1521-0741-8C3D-F445EE9C23E7@hxcore.ol>
References: <176085494745.1955446.13815832468506887894@dt-datatracker-84f8f646b-tg6mn>
To: tirumal reddy <kondtir@gmail.com>, TLS List <tls@ietf.org>
Content-Transfer-Encoding: base64
Content-Type: text/html; charset="utf-8"
Resent-Date: Sun, 19 Oct 2025 00:49:22 -0700
Resent-From: yaronf.ietf@gmail.com
Message-ID-Hash: WU56TLUN675PHSXAPH2IVFSXZPEL7DEP
X-Message-ID-Hash: WU56TLUN675PHSXAPH2IVFSXZPEL7DEP
X-MailFrom: yaronf.ietf@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] FW: New Version Notification for draft-sheffer-tls-pqc-continuity-00.txt
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/qfmTs0dFq-79aJOkKysIP_3KhEI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hi,

We expect the migration of TLS endpoints to PQC to span several years. During this period, many clients will likely be configured to accept both traditional and PQ signatures or certificates, creating a potential for rollback attacks. Tiru and I have posted a draft proposing a simple solution based on TLS signaling combined with a client-side caching mechanism. This approach is inspired by HSTS but operates at the TLS layer rather than the HTTP layer.

Thanks,
      Yaron

On 19/10/2025, 9:22, "internet-drafts@ietf.org" <internet-drafts@ietf.org> wrote:

A new version of Internet-Draft draft-sheffer-tls-pqc-continuity-00.txt has
been successfully submitted by Yaron Sheffer and posted to the
IETF repository.

Name:     draft-sheffer-tls-pqc-continuity
Revision: 00
Title:    PQC Continuity: Downgrade Protection for TLS Servers Migrating to PQC
Date:     2025-10-19
Group:    Individual Submission
Pages:    9


Abstract:

   As the Internet transitions toward post-quantum cryptography (PQC),
   many TLS servers will continue supporting traditional certificates to
   maintain compatibility with legacy clients.  However, this
   coexistence introduces a significant vulnerability: an undetected
   rollback attack, where a malicious actor strips the PQC or Composite
   certificate and forces the use of a traditional certificate once
   quantum-capable adversaries exist.

   To defend against this, this document defines a TLS extension that
   allows a client to cache a server's declared commitment to present
   PQC or composite certificates for a specified duration.  On
   subsequent connections, clients enforce that cached commitment and
   reject traditional-only certificates that conflict with it.  This
   mechanism, inspired by HTTP Strict Transport Security (HSTS) but
   operating at the TLS layer provides PQC downgrade protection without
   requiring changes to certificate authority (CA) infrastructure.



The IETF Secretariat



v2.46.0 | Report a Bug | By Email | System Status