[TLS] Re: Codepoint registration for algorithms enough?
Ilari Liusvaara <ilariliusvaara@welho.com> Wed, 30 September 2026 17:03 UTC
Received: from smtp.dnamail.fi (sender103.dnamail.fi [83.102.40.157]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id C734D4B for <tls@ietf.org>; Wed, 30 Sep 2026 17:03:48 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=welho.com header.s=2025-03 header.b=p8MyepnQ; dmarc=pass (policy=none) header.from=welho.com; spf=pass (mx.ietf.org: domain of ilariliusvaara@welho.com designates 83.102.40.157 as permitted sender) smtp.mailfrom=ilariliusvaara@welho.com
Received: from localhost (localhost [127.0.0.1]) by smtp.dnamail.fi (Postfix) with ESMTP id 8220A4098F39 for <tls@ietf.org>; Wed, 30 Sep 2026 20:03:47 +0300 (EEST)
X-Virus-Scanned: X-Virus-Scanned: amavis at smtp.dnamail.fi
Received: from smtp.dnamail.fi ([83.102.40.157]) by localhost (dmail-psmtp02.s.dnaip.fi [127.0.0.1]) (amavis, port 10024) with ESMTP id mUen8gNFO8dm for <tls@ietf.org>; Wed, 30 Sep 2026 20:03:47 +0300 (EEST)
Received: from LK-Perkele-VII2 (87-92-117-27.bb.dnainternet.fi [87.92.117.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: hliusvaa@dnamail.internal) by smtp.dnamail.fi (Postfix) with ESMTPSA id F14454098F37 for <tls@ietf.org>; Wed, 30 Sep 2026 20:03:46 +0300 (EEST)
DKIM-Filter: OpenDKIM Filter v2.11.0 smtp.dnamail.fi F14454098F37
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=welho.com; s=2025-03; t=1790787827; bh=9Cb36UH/VdCRqg//ngXsHTXkz3hO4PXigojPYIGtZ+0=; h=Date:From:To:Subject:References:In-Reply-To:From; b=p8MyepnQZfGJO/IEtYCBrsCtsYXNy2Yxj/NEzIYm1gsiVZToA58acGCf1gUgzPRID R7OcJbcmYh7rp9qM6S15C04yrjTTM3irtx7dch/oidj9Wo9hERBtSABkRQaM9aazIN gZuhVwOmiJ6wqg+xttxRc9FpfKmAjFv6m8JXPqaWHptfJXO0SC08DxRIT3PVbb+NJK wS6gvu0GzOSYa6XlSh3CfCr0F3i/upsp1q3QC3VAJq/Y6dFPd9NxKodmgC8g2HdW8H QfnNl+rJfhOkcwwyOTb83oy6ZjWrMb/hnr+izU38+YzoxAlWbftXM7lsMoaSNPmoFj 6kdYKORT90tZw==
Date: Wed, 30 Sep 2026 20:03:46 +0300
From: Ilari Liusvaara <ilariliusvaara@welho.com>
To: TLS List <tls@ietf.org>
Message-ID: <ar1A8tbX-Z0rBF9G@LK-Perkele-VII2.locald>
References: <CACsn0cmJkDmfXVbyimvNpr2NgpooazgZ8sNobfZ7dCQVaSwtdQ@mail.gmail.com> <aryq-7BSXoo_s7pz@LK-Perkele-VII2.locald> <CACsn0cnCFBmFw318EQD4APgfQaJAZvNehfreDZAAddggabg-2A@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <CACsn0cnCFBmFw318EQD4APgfQaJAZvNehfreDZAAddggabg-2A@mail.gmail.com>
Sender: ilariliusvaara@welho.com
X-Spamd-Bar: /
Message-ID-Hash: 2MBYHMKGSEAU7CJZV7LCB4FBSACPN7OE
X-Message-ID-Hash: 2MBYHMKGSEAU7CJZV7LCB4FBSACPN7OE
X-MailFrom: ilariliusvaara@welho.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; header-match-tls.ietf.org-5; header-match-tls.ietf.org-6; header-match-tls.ietf.org-7; header-match-tls.ietf.org-8; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [TLS] Re: Codepoint registration for algorithms enough?
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/z1G2vx54M-ZsGffIJKTWTjBe_Kw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
On Wed, Sep 30, 2026 at 09:20:06AM -0700, Watson Ladd wrote: > On Tue, Sep 29, 2026 at 11:24 PM Ilari Liusvaara > <ilariliusvaara@welho.com> wrote: > > > > On Tue, Sep 29, 2026 at 02:53:57PM -0700, Watson Ladd wrote: > > > Dear TLS WG, > > > > > > Is a codepoint registration all that we need for composite certs to > > > work in TLS pointing to the doc in LAMPS? I'm trying to understand > > > what content we would need to have here and why. > > > > AFAICT, other than the registration stuff, mostly just interoperability > > and security considerations. Prominent part of security considerations > > is downgrade attacks (to both traditional and standalone). > > That doesn't seem specific to this draft but shared by any enablement > of a new signature scheme. Composite signatures have special considerations with downgrade attacks (this also interacts with PKI policy), and also considerations with interoperability. -Ilari
- [TLS] Codepoint registration for algorithms enoug… Watson Ladd
- [TLS] Re: Codepoint registration for algorithms e… Ilari Liusvaara
- [TLS] Re: Codepoint registration for algorithms e… Watson Ladd
- [TLS] Re: Codepoint registration for algorithms e… Ilari Liusvaara
- [TLS] Re: Codepoint registration for algorithms e… Richard Barnes
- [TLS] Re: Codepoint registration for algorithms e… Ilari Liusvaara