Dear members of the IESG, On or about June 30, 2026, the IAB published its response to Dr. Bernstein's appeal concerning draft-ietf-tls-mlkem. The IAB denied the appeal but stated that Dr. Bernstein's technical objections "are properly addressed through the WG's ongoing process, including Working Group Last Call," and identified WGLC as "the appropriate venue for resolution of the substantive disagreements about the document's content."
Two days earlier, on or about June 28, the TLS chairs placed Dr. Bernstein under a 30 day moderation period. His messages now require chair approval and may be delayed up to two business days. The WG Last Call for draft-ietf-tls-mlkem-08 ends on July 8. 1. The IAB told Dr. Bernstein to make his case during WGLC. 2. The chairs are preventing him from doing so. 3. _These two actions directly contradict each other._ I am independently appealing the moderation pursuant to RFC 9945 Section 4.1 and RFC 2026 Section 6.5. To be clear, I am not writing on behalf of Dr. Bernstein or at his or anyone's request. I am writing because this contradiction represents a procedural failure that affects every participant in the TLS Working Group, and perhaps the entire IETF, and I have an obligation as a participant to raise it. I am requesting that the full IESG handle this appeal directly, as neither Security AD can serve as a neutral adjudicator. AD Cooley has publicly prejudged the matter by stating on-list, unprompted and before any appeal was filed: "I have seen no bias from my chairs." She further instructed a participant not to raise the issue of chair bias again on the list, foreclosing scrutiny of the very question she would be required to adjudicate under RFC 9945 Section 4.1. AD Wouters refused for months to address the substance of Dr. Bernstein's original complaint on this same dispute, was identified as having instigated the prior moderation actions, and was required to recuse himself when the matter reached the IESG in October 2025. Both ADs are compromised. The situation is functionally equivalent to one where the responsible AD "cannot be determined or is not assigned" under RFC 9945 Section 4.1. I. Background Dr. Bernstein is one of the most prominent technical cryptographers, and also, a critic of draft-ietf-tls-mlkem, which proposes deploying PQ cryptography without the protection of existing ECC encryption. He argues this creates serious security risks, while presenting both research, proofs of concepts and other facts. There are also those that disagree. This is a legitimate technical debate. AD Cooley clarified on-list that the moderation is "not for the technical content, but for the footnote which contains a derivative rights statement," referring to a copyright notice Dr. Bernstein appends to his emails. This is the Nth time Dr. Bernstein has been moderated for 30 days, so regularly, that we may be able to forego crond and use their timings instead. II. The cited authority is invalid The moderation notice cites "BCP9 / RFC3934 Section 2." This citation is wrong in two independent respects. BCP 9 is RFC 2026, not RFC 3934. These are separate documents. Additionally, RFC 3934 was obsoleted by RFC 9945 upon publication in February 2026. When this was raised on-list, AD Cooley asserted that RFC 9945 "is not in effect" yet. The RFC Editor records contradict this. The moderation was imposed under authority that no longer exists. III. The responsible AD has already been found to have misrepresented the record by the IAB In the same June 30 IAB response, the IAB noted that the responsible AD's "initial characterization of the adoption call did not accurately describe the record." This is a formal finding by the IAB that the AD misrepresented facts in a prior proceeding involving the same parties, the same document, and the same underlying dispute. It establishes a documented pattern of unreliable process administration on this matter. IV. A footnote does not constitute disruption The derivative works notice appears at the bottom of Dr. Bernstein's emails, after the substantive content. It prevents no one from reading or responding to his technical arguments. Whether the notice conforms to IETF intellectual property policy is a legitimate disagreement between Dr. Bernstein and the IESG. Using that disagreement as grounds to silence him during a WG Last Call is grossly disproportionate to the alleged disruption and raises serious questions about whether the true target is his technical position rather than his footnote. V. Selective enforcement During this same WG Last Call, other participants accused Dr. Bernstein of orchestrating a coordinated campaign. No warning or moderation followed. Participants who are for solo ML-KEM sling disrespect. Participants who are for solo ML-KEM have accused others of criminal behavior on the TLS list without consequence. NSA employees posted to the list for the first and only time to express support for the solo ML-KEM draft. No concern was raised about coordination in that instance. By contrast, when participants arrived through Dr. Bernstein's public call for involvement, which is expressly permitted under IETF rules stating that "There is no membership in the IETF" and "Anyone can participate," it was characterized as disruptive. This is precisely the pattern RFC 9945 Section 6 was written to prevent: "the potential abuse of the moderation procedures by moderators, working group chairs, and potentially others that could lead to censorship of legitimate participation." VI. Minority positions are protected under IETF policy RFC 9945 Section 1.2 states that "viewpoints outside the rough consensus are not in and of themselves disruptive." Dr. Bernstein holds a substantive technical position shared by, what the WG chairs and ADs consider to be, a minority of TLS WG participants. Fourteen participants filed objections during the, separate, ML-DSA WG Last Call for example. Suppressing this position through moderation, regardless of the procedural pretext, violates the policy the IETF adopted four months ago. VII. Requested relief 1. Lift Dr. Bernstein's moderation immediately, or at minimum ensure his messages are released without delay for the remainder of the WG Last Call ending July 8. 2. Clarify whether the substantive protections of RFC 9945, specifically Sections 1.2 and 6, are in effect during the transition period. I am a participant in the TLS Working Group and have contributed to the current WG Last Call for draft-ietf-tls-mlkem-08. Any person may raise a moderation disagreement under RFC 9945 Section 4.1. Respectfully submitted, Andrew
_______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected]
