IETF rejects appeal on ML-KEM TLS consensus and NSA conflict claims

Ken Kubota has escalated a formal complaint against the IETF TLS Working Group’s advancement of ML-KEM post-quantum key agreement for TLS 1.3, arguing that chairs wrongly declared rough consensus, withheld the numbers behind that claim, and that the process was compromised by conflicts of interest and NSA influence.

The draft has already been approved as an Informational RFC. Kubota first asked the chairs to revisit the July consensus call, then appealed to Security Area Director Deb Cooley after receiving no substantive reply, and finally to the IESG.

TLS chairs Joseph Salowey and Sean, and Cooley as responsible AD, each declined to process the appeal in its current form. Both cited multiple violations of the IETF Guidelines for Conduct and pointed to IESG guidance on proper appeals. Cooley noted her co-AD took no part in the reply.

Chairs had earlier refused to release detailed tallies or weighting methods used to judge consensus, stating only that roughly seven in ten participants favored moving the document forward. Another list participant, Andrew Lee, asked the ADs to specify which conduct rules were broken, saying continued opacity feeds public concern about bias on a standard that will shape encryption for billions of users.