Post #1120213
2026-04-10 20:08 UTC
The IETF TLS chairs have now issued a "last call" for objections to non-hybrid signatures in TLS. Do they admit that their previous "last call" re non-hybrid KEMs ended up with a _majority_ in opposition, and that many opposition statements obviously also apply to signatures? No.
Replies (2)
-
@argv_minus_one@mastodon.sdf.org 2026-04-10 20:34
@djb@mastodon.cr.yp.to Why do they want non-hybrid KEMs and signatures, anyway? Seems like a bad idea to protect all of everything with nothing but unproven crypto.
-
@purpleidea@mastodon.social 2026-04-11 00:47
@djb I read all your posts, but I'm not a cryptographer. My personal biased recommendation for someone missing a lot of context would be an "ELI5" summary to make certain story telling more obvious. Eg: "IETF chair is pushing agenda X or Y b/c I think they are being coerced by Z" or whatever