Just a reminder that the IETF is broken:
https://www.metzdowd.com/pipermail/cryptography/2026-June/039613.html
Timeline
Post
Remote status
Context
10
@encthenet that's a rather strong word. Mistakes were made
@rsalz
This isn't the only case. the Tcpenc group and what's happening with the tls pq draft being shoved through as additional examples.
@encthenet didn't know about tcpenc. Disagree with you on the pq draft.
@rsalz @encthenet recent DJB seems informative more than nit picky here: https://blog.cr.yp.to/20260630-risk.html
@darkuncle @encthenet I have known him for about 30 years. Back in the Usenet days. Lately, he will twist and cherry pick people's words to reinforce his point. Sorry, I admit that this may be on me, but I no longer think he is operating in good faith and I do not trust him or what he says anymore. He did it with me, here on this platform, so I am speaking from experience.
i long ago got to considering DJB as a highly intelligent person whose paranoias and fears made useful and collaborative use of said intelligence mostly impossible. a pity.
@paul_ipv6 @rsalz @darkuncle @encthenet
Please read this before treating djb with any seriousness. https://keymaterial.net/2025/11/27/ml-kem-mythbusting/
@sophieschmieg @paul_ipv6 @rsalz @darkuncle @encthenet stop believing in quantum computers, that's the first mistake
@feld @encthenet @darkuncle @paul_ipv6 @sophieschmieg @rsalz their blog post seems really good even if you think quantum computers are a boondoggle.
@feld @darkuncle @encthenet @paul_ipv6 @rsalz @sophieschmieg her post does not seem to address the very specific technical criticisms djb made though 
Replies
5
@sun @encthenet @darkuncle @paul_ipv6 @sophieschmieg @rsalz that's the usual tactic people take when they're upset that djb is right about something. he's a prick, but he's almost never wrong which is painful to accept.
@feld @encthenet @darkuncle @paul_ipv6 @sophieschmieg @rsalz @sun that and his domain name is pretty amazing.
@jae @encthenet @darkuncle @paul_ipv6 @sophieschmieg @rsalz @sun when he dies and the domain expires it's totally going to become a bitcoin site
@sun
I read that post as backing up djb's main issues. That pqc is "nsa only" and that it's recommended to use the hybrid and not the pqc only algo.
It's possible that I'm missing other issues, but those two seem to be the main ones.
@encthenet @feld @darkuncle @paul_ipv6 @sophieschmieg @rsalz I’m a dilettante so you might know a lot better than me!