[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

[Shane Killian]

I see no need to rehash the concerns. PQ algos are currently not strong 
enough to stand on their own against classical attacks. Cloudflare's 
experience with SIKE is evidence of this; the fact that they used a 
hybrid protocol is what protected them and their customers. I think it 
is irresponsible at this time to push for PQ alone, compared to hybrids 
that give the full protection currently afforded by ECC.

_______________________________________________
TLS mailing list -- tls@ietf.org
To unsubscribe send an email to tls-le...@ietf.org