Post #1139746
2026-04-13 21:35 UTC
@djb@mastodon.cr.yp.to @paulehoffman@infosec.exchange @rsalz@ioc.exchange By promoting, I meant "publication as an RFC would help the marketing (or promotion) of the PQ-only approach by actors linked to the US government." As in, "of course you can do that, the IETF published it as an RFC, do not look at the fine print."
Replies (1)
-
@djb@mastodon.cr.yp.to 2026-04-14 01:24
@huitema@social.secret-wg.org @paulehoffman@infosec.exchange @rsalz@ioc.exchange It's important to distinguish the non-controversial part (rolling out a PQ layer) from the controversial part (_removing_ the existing ECC layer rather than _supplementing_ the existing ECC layer). Saying that the objection is to "promoting an unproven algorithm" misunderstands what's actually at issue. Same for lumping both parts together into a combined "approach" and saying the objection is to that.