Re: [TLS] Fwd: New Version Notification for draft-davidben-tls-key-share-prediction-00.txt

On Fri, 29 Sept 2023 at 15:45, Bas Westerbaan wrote: > We have been investigating turning on post-quantum key agreement for > connections from Cloudflare to origin servers. In testing, we found that > 0.34% of origins will fail to establish a connection if we send > X25519Kyber768Draft00 keyshare

Re: [TLS] Fwd: New Version Notification for draft-davidben-tls-key-share-prediction-00.txt

> If the client is happy with either X25519 alone or X25519Kyber768, why not > send shares for both in the first ClientHello? > This is what Chrome does, and what we do if the user opts for "preferred" mode. [1] Would be good if draft-tls-westerbaan-xyber768d00 either mentions this as a > blessed

Re: [TLS] 2nd WG Last Call for draft-ietf-tls-dtls-rrc

> https://datatracker.ietf.org/doc/draft-ietf-tls-dtls-rrc/ > > > The WG Last Call will end 3 October 2023 @ 2359 UTC. I read the draft over the weekend. I am not a DTLS person, but I think this is a good document. It highlights both