[TLS] Re: FATT Chance: On the Robustness of Standalone and Hybrid ML-KEM Key Exchange in TLS 1.3

[Deirdre Connolly]

Correct, all versions of draft-ietf-tls-mlkem including before adoption
have had Recommended=N for all parameter sets

On Fri, Jun 5, 2026, 3:34 PM Salz, Rich <rsalz=40akamai....@dmarc.ietf.org>
wrote:

>
>    - This happened after a significant amount of time and was
>    deliberately steered toward the opposite of said result
>
>
> My recollection and view is the exact opposite. ML-KEM key exchange was
> *never*​ going to be RECOMMENDED=Y.  The system worked.  The “outside
> interference” just made it more complicated and caused a great deal of bad
> blood and distrust.
>
>
> _______________________________________________
> TLS mailing list -- tls@ietf.org
> To unsubscribe send an email to tls-le...@ietf.org
>

_______________________________________________
TLS mailing list -- tls@ietf.org
To unsubscribe send an email to tls-le...@ietf.org