[TLS] Re: Confirming PQ+T Signatures Consensus
Richard Barnes <rlb@ipv.sx> Wed, 30 September 2026 14:26 UTC
Received: from mail-oi2-x0e.google.com (mail-oi2-x0e.google.com [IPv6:2607:f8b0:4864:32::e]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id AA10447 for <tls@ietf.org>; Wed, 30 Sep 2026 14:26:28 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=ipv-sx.20251104.gappssmtp.com header.s=20251104 header.b=bWmMjPcJ; dmarc=none; arc=pass ("google.com:s=arc-20260327:i=1"); spf=none (mx.ietf.org: domain of rlb@ipv.sx has no SPF policy when checking 2607:f8b0:4864:32::e) smtp.mailfrom=rlb@ipv.sx
Received: by mail-oi2-x0e.google.com with SMTP id 5614622812f47-4e47db1adb8so1761548b6e.1 for <tls@ietf.org>; Wed, 30 Sep 2026 07:26:28 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1790778382; cv=none; d=google.com; s=arc-20260327; b=OnsAo5iUvLEyZH3sPM4uv6bYEYt8pCPrbJEq5GHkMyR5Ivx9WtSAt0/JaXHV7I6eqr 3Eoq34UrtcUdeZkpDj1HywrLiXOBc4c/xUy3U968feUQkHSN0ozw60eO2ujQXSkOjm2Z 4jA/G5I8ACecXO59y43N4bQBqi8sxX1I39qv/+hIacnAb0nKKIHQhvx/EhHPa/4faHtT ebjBUGSMoKIUIhQIwmdQtNcOsDpKYLrOw/TNOU+yEaOtNbQNLUj4rys5bwKhNVJjtIHB BZn2SX+42Nr1sz+RXIv/c80ysRC1tAmOrdqC9b4eyZFymi53RoY4GamscrYtOhA5vf57 AEHw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=Zs1dcZrsOW8VWpafsuiKzvjo4KG7ETpqFBXqltawytc=; fh=aBFklM+lbEhsMqu3XqvyuE4JizogVOdYr3XggxEskYc=; b=Ukycqz6h1HpjhspjYzbi7/riujRpMfGEHAiEnnMelr3QHf2DlVxM3UImaB+Vlb50GK 9xkHogWT81djvbBI5ip45nOoKfv4tLRQE/U9jZ190MzaeHgoD80mDe55KhLYZ2Iqgbb8 1HH2jg8V77vpTWUPFfLxHEa0qQoavOfFS01QRfGAVbmpW0KxvpcWr9ov6hO/U1/8u1S2 uIPewJDZSZRuIsmkFMkV99jkYVBFQEeTQtrTP6JM13VkRvpmrXcyMNkWO5rpCsNWyNd3 +gHVr33wDdvEbJ46f6h30SCOTI7+pPpekKk3jzyZbvZucpQlU7QVATHim8naA3HW5NGI f32A==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipv-sx.20251104.gappssmtp.com; s=20251104; t=1790778382; x=1791383182; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=Zs1dcZrsOW8VWpafsuiKzvjo4KG7ETpqFBXqltawytc=; b=bWmMjPcJ23k5rXihiFL0J70xA2lN8/6XJxksslOThzgk34YPGYoX+pmb3w8wemlTr0 2SwQ65Xx+kcMxWq9JZ4A/8wBQKSLM9P8A+mUVVPi23fVWol//gfv9lzTwFZv75WO+cH5 Tq8/fQi7JlmeEBQONXx4HdUZ0m3psNdT+vihT5lNyg4ghPceAPnmJO9wZaPloRYkK6lm R2BTrcz3BoXE8fDxgNeLQHLbEHMuIylMygDu7wsbO50QfjwxlyVE/J4GiqNPBD1eBy0N bGGIvoqEA0vcY/wNlNdnljetK0HB4vJecHisbfVQek3Cvj/wnmYkHR5LYATTSQEiolmM Zvbg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1790778382; x=1791383182; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=Zs1dcZrsOW8VWpafsuiKzvjo4KG7ETpqFBXqltawytc=; b=NyGKhwwqRUuJCxB1e8fTnb1ebH4IbCBIhTGrrl4wMfWm+SLOclgAKeaq4qkKBbCce7 Cq0gIz/kbEhbkV23Fc4goMV/q22oUdEcF0/WjiS5vTHBuk/1DrX3gqc0o1QBqqIRkf7O wvfRIByGYrN2gUh8UIgSgzBMonfYxlPw/6DJ7BE0DQOs5gxjv40wpm5E31to6Fjxv+oO SsTC1nAL7WzCzEqIx6mlMS6qTW0ItkEMz91SMpo+hz9bhnKL/XB7rf9CaSdPq5rJTwBv yfOAMJmYxyXVaOgqrRyXWEh6xmuNE71HLZVbgRtT6mmDPZveDS0UXogMtgra65mWFhai t0Cw==
X-Gm-Message-State: AFuF++n5dOg3vrtG6KgYF7BZNzLNmsdYc7AY9oC/3Iu9ZRLDmK8IUVwi BEAJEjd9i5KCO2nqt42hsBhRgMnQKDeSp+Jcmhod2wxx8bhp4Ww62UfSHtapHvuVCQV6umHVwWI FzPqlBMu8RjLsaJuJzXkymLab9Dh9xpN198pYmajGSbc9kENQr2Lq11ZwIA==
X-Gm-Gg: AYBFou1HsNUt+4/AbPgEO9YVj/I140nQuhz0vJhsZmnIdtu7yswybTrlmbSyDmrlSYP bDXwSW/D90yg8lgzcEA1G2x8ORZhEombM+vXqoV6vzhc//P5J0esEj2faj638VBRtTMNuBq36Gx 6fSYRXcFVVaQ06ByyIt3v9JlSh0BU0iwZw/5tql6bSA7PrO91QIg05R0v1ZcUIGLsF+p6v0zdd6 UWPQPXJc4EtT3N08lP13JGq5Pspt72ey33aEXX404Nowgw5Y/gbedjlaGWQCbxRXScIV5hdvbvK 0dk+B9zFs4vXLMu6ichVJ1A+FhFj4VIQ0+lToO3SLLKVD4e7cAsF5zDqcI3Z/M2LwfHSIEQw9WG zXv8ormGLbcUn
X-Received: by 2002:a05:6808:4fe3:b0:4d6:9232:b3c0 with SMTP id 5614622812f47-4f1b82d64c2mr1845846b6e.55.1790778381789; Wed, 30 Sep 2026 07:26:21 -0700 (PDT)
MIME-Version: 1.0
References: <A383CF85-CF66-4A3D-AFBC-3F2CCFEE265C@sn3rd.com>
In-Reply-To: <A383CF85-CF66-4A3D-AFBC-3F2CCFEE265C@sn3rd.com>
From: Richard Barnes <rlb@ipv.sx>
Date: Wed, 30 Sep 2026 04:26:10 -1000
X-Gm-Features: AclHuK9IzxnXgP4drVQZy39Rjoe7nZaanqHgZ5sRqtTJ4AklDHCask48xkUyZ3Q
Message-ID: <CAL02cgTDYtnemWqqi7jn4FLOKUiVc3hpiydgXOc_zdO8Hq6pQQ@mail.gmail.com>
To: Sean Turner <sean@sn3rd.com>
Content-Type: multipart/alternative; boundary="00000000000051813c065cb4150b"
X-Spamd-Bar: -
Message-ID-Hash: DYIG3VMGJ56CWCYPKLTWYPAATAYDE26D
X-Message-ID-Hash: DYIG3VMGJ56CWCYPKLTWYPAATAYDE26D
X-MailFrom: rlb@ipv.sx
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; header-match-tls.ietf.org-5; header-match-tls.ietf.org-6; header-match-tls.ietf.org-7; header-match-tls.ietf.org-8; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [TLS] Re: Confirming PQ+T Signatures Consensus
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/zEZh-YymWk6edi2E9ZriYiX6e74>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
Weak "no" on the basis of draft-barnes-tls-this-could-have-been-an-email [1]. LAMPS is already doing the work of defining composite signature algorithms [2]. Once that's done, just send email to IANA to register the relevant code points. I realize that PQ is the new hotness, but really, we don't need a million documents touching every protocol. [1] https://datatracker.ietf.org/doc/draft-barnes-tls-this-could-have-been-an-email/ [2] https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/ On Mon, Sep 28, 2026 at 12:53 PM Sean Turner <sean@sn3rd.com> wrote: > At IETF 126, the chairs conducted a series of polls [1] to determine the > way forward for PQ+T hybrid signatures after hearing from the > -composite-mldsa [2] and -pqt-dual-certs [3] authors; you can watch the > setup, authors presentations, and the polls at [4] from around 0:16:47 > until 1:08:00. The polls' results showed in-room consensus to 1) work on PQ > + T Signatures for TLS and 2) work only on -composite-mldsa. The chairs now > need to confirm this consensus on list. We are going to do this by asking > the four questions that follow. Please take note of the take note of the > following: > > 1. Framing of the questions is found in this deck [5]; in case it is/was > not clear a "Yes" on Question 1 implies WG adoption of a draft. > 2. Again, a "Yes" for 3 or 4 implies you are in favor of adopting the > associated draft as a working group item. > 3. Based on the responses we got during the session we only asked the 1st > 4 questions in [5]. > > Please provide your answers to the following questions by 12 October 2026: > > 1. Should the WG work on PQ + T Hybrid Signatures for TLS? > 2. Should the WG only work on one: -pqt-dual-certs or -composite-ml-dsa? > 3. Should the WG work on: -pqt-dual-certs? > 4. Should the WG work on: -composite-ml-dsa? > > Cheers, > spt (for the chairs) > > [1] https://datatracker.ietf.org/doc/polls-126-tls-202607241600/ > [2] https://datatracker.ietf.org/doc/draft-reddy-tls-composite-mldsa/ > [3] https://datatracker.ietf.org/doc/draft-yusef-tls-pqt-dual-certs/ > [4] https://www.youtube.com/watch?v=Qp1s1UMmhTI > [5] > https://datatracker.ietf.org/meeting/126/materials/slides-126-tls-framing-pq-t-signatures-for-tls-00 > _______________________________________________ > TLS mailing list -- tls@ietf.org > To unsubscribe send an email to tls-leave@ietf.org >
- [TLS] Confirming PQ+T Signatures Consensus Sean Turner
- [TLS] Re: Confirming PQ+T Signatures Consensus John Mattsson
- [TLS] Re: [EXTERNAL] Re: Confirming PQ+T Signatur… Andrei Popov
- [TLS] Re: [EXTERNAL] Re: Confirming PQ+T Signatur… Loganaden Velvindron
- [TLS] Re: Confirming PQ+T Signatures Consensus Salz, Rich
- [TLS] Re: Confirming PQ+T Signatures Consensus Watson Ladd
- [TLS] Re: Confirming PQ+T Signatures Consensus Salz, Rich
- [TLS] Re: Confirming PQ+T Signatures Consensus Yaakov Stein
- [TLS] Re: Confirming PQ+T Signatures Consensus Martin Thomson
- [TLS] Re: Confirming PQ+T Signatures Consensus Russ Housley
- [TLS] Re: [EXTERNAL] Confirming PQ+T Signatures C… Andrei Popov
- [TLS] Re: [EXTERNAL] Confirming PQ+T Signatures C… John Mattsson
- [TLS] Re: [EXTERNAL] Confirming PQ+T Signatures C… Muhammad Usama Sardar
- [TLS] Re: [EXTERNAL] Confirming PQ+T Signatures C… Andrei Popov
- [TLS] Re: [EXTERNAL] Confirming PQ+T Signatures C… John Mattsson
- [TLS] Re: [EXTERNAL] Confirming PQ+T Signatures C… Samuel Lee (ENS/Crypto)
- [TLS] Re: [EXTERNAL] Confirming PQ+T Signatures C… Soatok Dreamseeker
- [TLS] Re: [EXTERNAL] Confirming PQ+T Signatures C… Bellebaum, Thomas
- [TLS] Re: Confirming PQ+T Signatures Consensus David Benjamin
- [TLS] Re: Confirming PQ+T Signatures Consensus Filippo Valsorda
- [TLS] Re: [EXTERNAL] Confirming PQ+T Signatures C… Samuel Lee (ENS/Crypto)
- [TLS] Re: [EXT] Re: [EXTERNAL] Confirming PQ+T Si… Blumenthal, Uri - 0553 - MITLL
- [TLS] Re: Confirming PQ+T Signatures Consensus Scott Fluhrer (sfluhrer)
- [TLS] Re: Confirming PQ+T Signatures Consensus Andrey Jivsov
- [TLS] Re: Confirming PQ+T Signatures Consensus tirumal reddy
- [TLS] Re: Confirming PQ+T Signatures Consensus Rifaat Shekh-Yusef
- [TLS] Re: Confirming PQ+T Signatures Consensus Bas Westerbaan
- [TLS] Re: Confirming PQ+T Signatures Consensus Eric Rescorla
- [TLS] Re: Confirming PQ+T Signatures Consensus loic.ferreira
- [TLS] Re: Confirming PQ+T Signatures Consensus Stephen Farrell
- [TLS] Re: Confirming PQ+T Signatures Consensus tirumal reddy
- [TLS] Re: Confirming PQ+T Signatures Consensus Watson Ladd
- [TLS] Re: Confirming PQ+T Signatures Consensus tirumal reddy
- [TLS] Re: Confirming PQ+T Signatures Consensus Ilari Liusvaara
- [TLS] Re: Confirming PQ+T Signatures Consensus Sophie Schmieg
- [TLS] Re: Confirming PQ+T Signatures Consensus Ilari Liusvaara
- [TLS] Re: Confirming PQ+T Signatures Consensus Paul Wouters
- [TLS] Re: Confirming PQ+T Signatures Consensus Andrey Jivsov
- [TLS] Re: Confirming PQ+T Signatures Consensus Soatok Dreamseeker
- [TLS] Re: Confirming PQ+T Signatures Consensus Joe Birr-Pixton
- [TLS] Re: Confirming PQ+T Signatures Consensus olivier.sanders
- [TLS] Re: Confirming PQ+T Signatures Consensus Daniel Van Geest
- [TLS] Re: [EXTERNAL] Confirming PQ+T Signatures C… John Gray
- [TLS] Re: [EXTERNAL] Confirming PQ+T Signatures C… Ira McDonald
- [TLS] Re: Confirming PQ+T Signatures Consensus Richard Barnes
- [TLS] Re: Confirming PQ+T Signatures Consensus Chase Abbott
- [TLS] Re: Confirming PQ+T Signatures Consensus Jan Klaußner
- [TLS] Re: Confirming PQ+T Signatures Consensus Ryan Appel
- [TLS] Re: Confirming PQ+T Signatures Consensus Yaroslav Rosomakho
- [TLS] Re: Confirming PQ+T Signatures Consensus Damien Miller
- [TLS] Re: Confirming PQ+T Signatures Consensus Loganaden Velvindron
- [TLS] Re: Confirming PQ+T Signatures Consensus Wang Guilin
- [TLS] Re: Confirming PQ+T Signatures Consensus Hannes Tschofenig
- [TLS] Re: Confirming PQ+T Signatures Consensus Bashiri, Kaveh
- [TLS] Re: Confirming PQ+T Signatures Consensus Dan Wing