IETF Logo Mail Archive

[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-05 (Ends 2026-02-27)

Nadim Kobeissi <nadim@symbolic.software> Fri, 20 February 2026 15:23 UTC

Return-Path: <nadim@symbolic.software>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 9F215BA7B562 for <tls@mail2.ietf.org>; Fri, 20 Feb 2026 07:23:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.798
X-Spam-Level:
X-Spam-Status: No, score=-2.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=symbolic.software header.b="OTrYETBQ"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="lgQHyrj8"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aYHC8ccUZlnN for <tls@mail2.ietf.org>; Fri, 20 Feb 2026 07:23:36 -0800 (PST)
Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 96E1FBA7B557 for <tls@ietf.org>; Fri, 20 Feb 2026 07:23:36 -0800 (PST)
Received: from phl-compute-10.internal (phl-compute-10.internal [10.202.2.50]) by mailfout.phl.internal (Postfix) with ESMTP id 8A552EC0096; Fri, 20 Feb 2026 10:23:31 -0500 (EST)
Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-10.internal (MEProxy); Fri, 20 Feb 2026 10:23:31 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= symbolic.software; h=cc:cc:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1771601011; x=1771687411; bh=oKX+3yzB7UBPvY+KwZ9PGisGgpIAZLfpQaGas6mTIUI=; b= OTrYETBQXVp6e+uxaoLGtKTobQC/UpsZdkgutGL+jCEKXWLTh5mc4lSoqKtNJYXI WoUrZhVEGav54cUROmSy0ZBbBwB9ExRyVM1vrjOhRQjzh8wJMWdTAzrvEB7dxyBt qqx71QmzUP4LQWOQjr+w1ShOLEbs3POBdCjAwi3IVmq8+yYI/SMwFkwyvMNOnDDw MVTP0HQREUpRVzwhjliPY9TvJNKxdUlsiw5T6sy23Ce3eB5Gt9ZxVepm7wfnx7fQ CWMd/9HDaHXdsLBygB6zSQv4AaOsNUT3OyJLOsKpohSeDsvhubgsHlqUUvNadu/I ictcTd1FbB0s+FH8d2rneQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1771601011; x=1771687411; bh=oKX+3yzB7UBPvY+KwZ9PGisGgpIAZLfpQaG as6mTIUI=; b=lgQHyrj8QckMXqW6hS54Qa3UncxbUGmRPaleAa0nYauqRhp91vN gCVmBJVr7D1mw2cPuoVBRvP/84OqmDhmf4wH680o9s0bRTljb25uDMegmYX6GFu2 0zL8q1ZdPOi5VNmvWL1yEdwfbfWOZsOHXR9Y9bqUc1jdb0NqrtVJwhgCEGIA04N2 2PnMxrS1KEEVXOh9l/3EnEp0ZwgrLhOVwqX3lppkQuQ1axDPHorx0B2XWZHdUcnK ElyMxLkdmBdpuYUryHgT35N7ZB11XP2VppWAmUcYRbskc9ut9ttSHJueHo4JbI3Q NjfznRxbLeFp5x3/W3aSK3jFNE8C+6s2Peg==
X-ME-Sender: <xms:c3yYaSIhTiYCcak1WroxWd3XcKzwWx57yBPNZ8D9aVWsFxI1qs5T1A> <xme:c3yYaQJH9GB5c3W508qg0Zkpwg8cFpAg6CUxu9HZ6tSIHwvPgQQTeRMfph1gZYyoW 0W9_qxrm1j6i7nM83fCKBJYIaS1i9OixWQLFBN9mlp7e7bzYjq5lQfP>
X-ME-Received: <xmr:c3yYaQX-7iWbpjac-Oo1VOn9py5HH1-WNn0oATtRuEtb14IqOdlCVn9j34LwiK0AWzLx_VWFbLgziJVUEuPI_AoakRg463dfqUPDh9Ev2xrTfEb9HmiAUVCCVg>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefgedrtddtgddvvdekjeelucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfurfetoffkrfgpnffqhgenuceu rghilhhouhhtmecufedttdenucenucfjughrpefhkfgtggfuffgjvefvfhfosegrtdhmre hhtdejnecuhfhrohhmpefprgguihhmucfmohgsvghishhsihcuoehnrgguihhmsehshihm sgholhhitgdrshhofhhtfigrrhgvqeenucggtffrrghtthgvrhhnpeffhfevjeekteejte eikedvhffgveekffeitdffhefggeetheevleehueefheefieenucffohhmrghinhepshih mhgsohhlihgtrdhsohhfthifrghrvgdpihgvthhfrdhorhhgnecuvehluhhsthgvrhfuih iivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepnhgrughimhesshihmhgsohhlihgt rdhsohhfthifrghrvgdpnhgspghrtghpthhtohepvddpmhhouggvpehsmhhtphhouhhtpd hrtghpthhtohepphgruhhlpeegtdhnohhhrghtshdrtggrsegumhgrrhgtrdhivghtfhdr ohhrghdprhgtphhtthhopehtlhhssehivghtfhdrohhrgh
X-ME-Proxy: <xmx:c3yYaSjvcInTMcTtFhQX4Uf1_dA-lV_0yZs2VsPECi7yiNhgwv9fig> <xmx:c3yYab9Bmg40qbjMKyNlAXqNosebUhRxISBuMc3_czqjKascY8l5wA> <xmx:c3yYacCDa6rFA1gLvoqcIDqkdavvk0lcFzObdCRDWwhl0vxqLhTwqQ> <xmx:c3yYaYJLuvgq6KU5-Gpgu-q5nfxYqJ63rpgut3aWLsDgzW_5JuZBdg> <xmx:c3yYafUbCDc1LsQa6clcEcl9UNAoGROuHRnTrJ7mxZwlpl4HWo2qGZb1>
Feedback-ID: i6d3949ed:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Fri, 20 Feb 2026 10:23:30 -0500 (EST)
From: Nadim Kobeissi <nadim@symbolic.software>
Message-Id: <22AC29F1-BD50-4B21-BA38-0662E60AB497@symbolic.software>
Content-Type: multipart/alternative; boundary="Apple-Mail=_397F5584-CA02-42B1-93D4-E4EA4CF91C82"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.400.21\))
Date: Fri, 20 Feb 2026 16:23:19 +0100
In-Reply-To: <9b71e709-69a3-f3d9-4cbd-d4d521556c55@nohats.ca>
To: Paul Wouters <paul=40nohats.ca@dmarc.ietf.org>
References: <20260218194044.1135896.qmail@cr.yp.to> <7C9C99AA-42B0-4BC7-8F41-39F35754F1C4@vigilsec.com> <MN2PR17MB40310F0A2891942D76C43E60CD6BA@MN2PR17MB4031.namprd17.prod.outlook.com> <2caab265-00ba-4078-b6d0-3a178dabaa61@tu-dresden.de> <CAEEbLAbkV4YxN7cgggckpEp24MLtRZpzs6M4KemBatpzCCcs0A@mail.gmail.com> <MEAPR01MB3654415F735DE96CEE239C78EE68A@MEAPR01MB3654.ausprd01.prod.outlook.com> <aZfbhrFDBp7a0xHL@chardros.imrryr.org> <EB48AB24-A1A2-47C8-9C2C-47C93B9320E7@thomwiggers.nl> <93af0689-4bd3-4f6b-afaf-41869d27fa4d@app.fastmail.com> <CAMtubr3QcHbiP5guhBoiFbFh8tKSD6WNHBJkxxb_AM4Wy5i0=g@mail.gmail.com> <9b71e709-69a3-f3d9-4cbd-d4d521556c55@nohats.ca>
X-Mailer: Apple Mail (2.3864.400.21)
Message-ID-Hash: 5R3WMMMQXYJVOQ27QHFQ4JYDV3DCHOMY
X-Message-ID-Hash: 5R3WMMMQXYJVOQ27QHFQ4JYDV3DCHOMY
X-MailFrom: nadim@symbolic.software
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: tls@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-05 (Ends 2026-02-27)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/zMvOpN_oBMtxOv8jPTlXnBfpS4M>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hi Paul,

Quoting from your email:

>  WG Chairs view [is] that the consensus call passed

This is surprising. I’m not sure how the IETF defines consensus these days, but I personally do not see any clear consensus on this draft.

Nadim Kobeissi
Symbolic Software • https://symbolic.software

> On 20 Feb 2026, at 4:00 PM, Paul Wouters <paul=40nohats.ca@dmarc.ietf.org> wrote:
> 
> 
> [ AD hat on ]
> 
> All,
> 
> I want to remind people that the goal of this 2nd WGLC is to focus on
> the new text changed in responds to the conclusion of the 1st WGLC.
> 
> We already had a WGLC on this document [1] and the conclusion [2] was
> that it passed WGLC provided some clarifying text would be added that
> stated that for the general use case, hybrids were preferred. This
> 2nd WGLC is about that topic.
> 
> There is an appeal chain that got muddled by the inappropriate use of
> derivative clauses that is still in progress, but so far yielded the AD
> statement [3] that confirmed the WG Chairs view that the consensus call
> passed. There is an appeal with the IESG [4] on that decision, and this
> document will not be placed in the RFC Editor queue until that appeal has
> concluded, but will also not stop all processing while the appeal runs.
> 
> This 2nd WGLC is meant to get those people who provisionally said "yes"
> to publication of this document pending some extra text, to review this
> text and let us know if that resolves the conditional part of their
> "yes" statement. The text changes to discuss can be seen at:
> 
> https://author-tools.ietf.org/iddiff?url1=draft-ietf-tls-mlkem-05&url2=draft-ietf-tls-mlkem-07&difftype=--html
> 
> 
> I understand this is a heated topic. I am also not hearing from people
> that they have changed their opinion on whether or not to publish this
> document at all. Confirming your views are fine, but again, that is not
> the goal of this 2nd WGLC. It would be helpful if, especially those
> people who wanted additional clarifying text, to give us feedback on
> this. And ideally, offer up suggestions that would address any still
> outstanding issues.
> 
> Thanks,
> 
> Paul
> 
> [1] https://mailarchive.ietf.org/arch/msg/tls/Pzdox1sDDG36q19PWDVPghsiyXA/
> [2] https://mailarchive.ietf.org/arch/msg/tls/Gc6KVPrVHn-QCkeEcvJ_qtRcFxY/
> [3] https://mailarchive.ietf.org/arch/msg/tls/dzPT8KQe4S-_pZROLUJMvS9pM0M/
> [4] https://datatracker.ietf.org/group/iesg/appeals/artifact/230
> 
> _______________________________________________
> TLS mailing list -- tls@ietf.org
> To unsubscribe send an email to tls-leave@ietf.org

v2.40.1 | Report a Bug | By Email | System Status