[TLS] Re: Confirming PQ+T Signatures Consensus

Richard Barnes <rlb@ipv.sx> Wed, 30 September 2026 14:26 UTC

Received: from mail-oi2-x0e.google.com (mail-oi2-x0e.google.com [IPv6:2607:f8b0:4864:32::e]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id AA10447 for <tls@ietf.org>; Wed, 30 Sep 2026 14:26:28 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=ipv-sx.20251104.gappssmtp.com header.s=20251104 header.b=bWmMjPcJ; dmarc=none; arc=pass ("google.com:s=arc-20260327:i=1"); spf=none (mx.ietf.org: domain of rlb@ipv.sx has no SPF policy when checking 2607:f8b0:4864:32::e) smtp.mailfrom=rlb@ipv.sx
Received: by mail-oi2-x0e.google.com with SMTP id 5614622812f47-4e47db1adb8so1761548b6e.1 for <tls@ietf.org>; Wed, 30 Sep 2026 07:26:28 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1790778382; cv=none; d=google.com; s=arc-20260327; b=OnsAo5iUvLEyZH3sPM4uv6bYEYt8pCPrbJEq5GHkMyR5Ivx9WtSAt0/JaXHV7I6eqr 3Eoq34UrtcUdeZkpDj1HywrLiXOBc4c/xUy3U968feUQkHSN0ozw60eO2ujQXSkOjm2Z 4jA/G5I8ACecXO59y43N4bQBqi8sxX1I39qv/+hIacnAb0nKKIHQhvx/EhHPa/4faHtT ebjBUGSMoKIUIhQIwmdQtNcOsDpKYLrOw/TNOU+yEaOtNbQNLUj4rys5bwKhNVJjtIHB BZn2SX+42Nr1sz+RXIv/c80ysRC1tAmOrdqC9b4eyZFymi53RoY4GamscrYtOhA5vf57 AEHw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=Zs1dcZrsOW8VWpafsuiKzvjo4KG7ETpqFBXqltawytc=; fh=aBFklM+lbEhsMqu3XqvyuE4JizogVOdYr3XggxEskYc=; b=Ukycqz6h1HpjhspjYzbi7/riujRpMfGEHAiEnnMelr3QHf2DlVxM3UImaB+Vlb50GK 9xkHogWT81djvbBI5ip45nOoKfv4tLRQE/U9jZ190MzaeHgoD80mDe55KhLYZ2Iqgbb8 1HH2jg8V77vpTWUPFfLxHEa0qQoavOfFS01QRfGAVbmpW0KxvpcWr9ov6hO/U1/8u1S2 uIPewJDZSZRuIsmkFMkV99jkYVBFQEeTQtrTP6JM13VkRvpmrXcyMNkWO5rpCsNWyNd3 +gHVr33wDdvEbJ46f6h30SCOTI7+pPpekKk3jzyZbvZucpQlU7QVATHim8naA3HW5NGI f32A==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipv-sx.20251104.gappssmtp.com; s=20251104; t=1790778382; x=1791383182; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=Zs1dcZrsOW8VWpafsuiKzvjo4KG7ETpqFBXqltawytc=; b=bWmMjPcJ23k5rXihiFL0J70xA2lN8/6XJxksslOThzgk34YPGYoX+pmb3w8wemlTr0 2SwQ65Xx+kcMxWq9JZ4A/8wBQKSLM9P8A+mUVVPi23fVWol//gfv9lzTwFZv75WO+cH5 Tq8/fQi7JlmeEBQONXx4HdUZ0m3psNdT+vihT5lNyg4ghPceAPnmJO9wZaPloRYkK6lm R2BTrcz3BoXE8fDxgNeLQHLbEHMuIylMygDu7wsbO50QfjwxlyVE/J4GiqNPBD1eBy0N bGGIvoqEA0vcY/wNlNdnljetK0HB4vJecHisbfVQek3Cvj/wnmYkHR5LYATTSQEiolmM Zvbg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1790778382; x=1791383182; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=Zs1dcZrsOW8VWpafsuiKzvjo4KG7ETpqFBXqltawytc=; b=NyGKhwwqRUuJCxB1e8fTnb1ebH4IbCBIhTGrrl4wMfWm+SLOclgAKeaq4qkKBbCce7 Cq0gIz/kbEhbkV23Fc4goMV/q22oUdEcF0/WjiS5vTHBuk/1DrX3gqc0o1QBqqIRkf7O wvfRIByGYrN2gUh8UIgSgzBMonfYxlPw/6DJ7BE0DQOs5gxjv40wpm5E31to6Fjxv+oO SsTC1nAL7WzCzEqIx6mlMS6qTW0ItkEMz91SMpo+hz9bhnKL/XB7rf9CaSdPq5rJTwBv yfOAMJmYxyXVaOgqrRyXWEh6xmuNE71HLZVbgRtT6mmDPZveDS0UXogMtgra65mWFhai t0Cw==
X-Gm-Message-State: AFuF++n5dOg3vrtG6KgYF7BZNzLNmsdYc7AY9oC/3Iu9ZRLDmK8IUVwi BEAJEjd9i5KCO2nqt42hsBhRgMnQKDeSp+Jcmhod2wxx8bhp4Ww62UfSHtapHvuVCQV6umHVwWI FzPqlBMu8RjLsaJuJzXkymLab9Dh9xpN198pYmajGSbc9kENQr2Lq11ZwIA==
X-Gm-Gg: AYBFou1HsNUt+4/AbPgEO9YVj/I140nQuhz0vJhsZmnIdtu7yswybTrlmbSyDmrlSYP bDXwSW/D90yg8lgzcEA1G2x8ORZhEombM+vXqoV6vzhc//P5J0esEj2faj638VBRtTMNuBq36Gx 6fSYRXcFVVaQ06ByyIt3v9JlSh0BU0iwZw/5tql6bSA7PrO91QIg05R0v1ZcUIGLsF+p6v0zdd6 UWPQPXJc4EtT3N08lP13JGq5Pspt72ey33aEXX404Nowgw5Y/gbedjlaGWQCbxRXScIV5hdvbvK 0dk+B9zFs4vXLMu6ichVJ1A+FhFj4VIQ0+lToO3SLLKVD4e7cAsF5zDqcI3Z/M2LwfHSIEQw9WG zXv8ormGLbcUn
X-Received: by 2002:a05:6808:4fe3:b0:4d6:9232:b3c0 with SMTP id 5614622812f47-4f1b82d64c2mr1845846b6e.55.1790778381789; Wed, 30 Sep 2026 07:26:21 -0700 (PDT)
MIME-Version: 1.0
References: <A383CF85-CF66-4A3D-AFBC-3F2CCFEE265C@sn3rd.com>
In-Reply-To: <A383CF85-CF66-4A3D-AFBC-3F2CCFEE265C@sn3rd.com>
From: Richard Barnes <rlb@ipv.sx>
Date: Wed, 30 Sep 2026 04:26:10 -1000
X-Gm-Features: AclHuK9IzxnXgP4drVQZy39Rjoe7nZaanqHgZ5sRqtTJ4AklDHCask48xkUyZ3Q
Message-ID: <CAL02cgTDYtnemWqqi7jn4FLOKUiVc3hpiydgXOc_zdO8Hq6pQQ@mail.gmail.com>
To: Sean Turner <sean@sn3rd.com>
Content-Type: multipart/alternative; boundary="00000000000051813c065cb4150b"
X-Spamd-Bar: -
Message-ID-Hash: DYIG3VMGJ56CWCYPKLTWYPAATAYDE26D
X-Message-ID-Hash: DYIG3VMGJ56CWCYPKLTWYPAATAYDE26D
X-MailFrom: rlb@ipv.sx
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; header-match-tls.ietf.org-5; header-match-tls.ietf.org-6; header-match-tls.ietf.org-7; header-match-tls.ietf.org-8; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [TLS] Re: Confirming PQ+T Signatures Consensus
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/zEZh-YymWk6edi2E9ZriYiX6e74>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Weak "no" on the basis of draft-barnes-tls-this-could-have-been-an-email
[1].

LAMPS is already doing the work of defining composite signature algorithms
[2].  Once that's done, just send email to IANA to register the relevant
code points.

I realize that PQ is the new hotness, but really, we don't need a million
documents touching every protocol.

[1]
https://datatracker.ietf.org/doc/draft-barnes-tls-this-could-have-been-an-email/
[2] https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/

On Mon, Sep 28, 2026 at 12:53 PM Sean Turner <sean@sn3rd.com> wrote:

> At IETF 126, the chairs conducted a series of polls [1] to determine the
> way forward for PQ+T hybrid signatures after hearing from the
> -composite-mldsa [2] and -pqt-dual-certs [3] authors; you can watch the
> setup, authors presentations, and the polls at [4] from around 0:16:47
> until 1:08:00. The polls' results showed in-room consensus to 1) work on PQ
> + T Signatures for TLS and 2) work only on -composite-mldsa. The chairs now
> need to confirm this consensus on list. We are going to do this by asking
> the four questions that follow. Please take note of the take note of the
> following:
>
> 1. Framing of the questions is found in this deck [5]; in case it is/was
> not clear a "Yes" on Question 1 implies WG adoption of a draft.
> 2. Again, a "Yes" for 3 or 4 implies you are in favor of adopting the
> associated draft as a working group item.
> 3. Based on the responses we got during the session we only asked the 1st
> 4 questions in [5].
>
> Please provide your answers to the following questions by 12 October 2026:
>
> 1. Should the WG work on PQ + T Hybrid Signatures for TLS?
> 2. Should the WG only work on one: -pqt-dual-certs or -composite-ml-dsa?
> 3. Should the WG work on: -pqt-dual-certs?
> 4. Should the WG work on: -composite-ml-dsa?
>
> Cheers,
> spt (for the chairs)
>
> [1] https://datatracker.ietf.org/doc/polls-126-tls-202607241600/
> [2] https://datatracker.ietf.org/doc/draft-reddy-tls-composite-mldsa/
> [3] https://datatracker.ietf.org/doc/draft-yusef-tls-pqt-dual-certs/
> [4] https://www.youtube.com/watch?v=Qp1s1UMmhTI
> [5]
> https://datatracker.ietf.org/meeting/126/materials/slides-126-tls-framing-pq-t-signatures-for-tls-00
> _______________________________________________
> TLS mailing list -- tls@ietf.org
> To unsubscribe send an email to tls-leave@ietf.org
>