一位作者指控美国国家安全局(NSA)及其关联方通过人员安排和投票操纵,在互联网工程任务组(IETF)中推动通过一项TLS混合加密标准规范[1]。该规范旨在移除椭圆曲线(ECC)混合加密中的"安全带"机制[1]。尽管有82人在TLS邮件列表中明确反对该规范,IETF工作组主席仍宣布达成共识并将其转交互联网工程指导小组(IESG)[1]。
作者指出这违反了IETF的"粗略共识"(rough consensus)决策规则[1]。根据该规则,共识要求"极大多数关切此事的人"同意,而"占工作组51%的支持远不足以构成'粗略共识'"[1]。工作组主席所引用的共识理由存在多个版本,最初声称"大约十分之七的工作组参与者支持推进",后来则改为仅计"最后一轮征询意见前的参与者"[1]。
IETF决策过程中存在广泛的利益冲突[1]。IESG的14名成员中,至少9名与美国防部、NSA或国防承包商有关联,涉及Akamai、Cloudflare、Nokia等企业[1]。NSA前员工Deb Cooley退休后加入IESG并担任主席,声称退休消除了利益冲突[1]。在最新一轮投票中,6名NSA员工支持该规范,其中Peter Yee同时为NSA和Akayla咨询公司工作[1]。TLS工作组主席Sean Turner是Akayla公司的"财务主管、秘书和安全官员"[1]。该规范的作者为CIA资助的Sandbox AQ的员工[1]。
投诉者于2025年12月向互联网社会(ISOC)提出投诉[1]。规范于2026年7月28日转交IESG[1],IESG于2026年7月30日发布最后一轮意见征询[1]。
An author has accused the NSA and affiliated parties of manipulating the Internet Engineering Task Force (IETF) through personnel placement and voting tactics to advance a TLS encryption standard proposal [1]. The allegation centers on a specification that was forwarded to the Internet Engineering Steering Group (IESG) on July 28, 2026, at 15:10:40 -0700, despite significant procedural irregularities [1].
During the working group's last call for comments, 82 individuals explicitly opposed the specification on the TLS mailing list [1]. Under IETF's "rough consensus" rule, approval requires "a very large majority of those who care," and the author contends that "51% of the working group does not qualify as 'rough consensus'" [1]. The working group chair's justification for declaring consensus shifted between accounts: an initial claim stated "roughly 7/10 WG participants favor advancing," while a later version counted only participants "prior to the last WGLC" [1]. The specification was subsequently submitted to IESG on July 30, 2026, at 13:38:00 -0700 for a final comment period [1].
The author has identified significant conflicts of interest within IETF leadership. Of the 14 IESG members, nine are documented as having connections to the U.S. Department of Defense, NSA, or defense contractors including Akamai, Cloudflare, Nokia, SEI, and Cisco [1]. Deb Cooley, a former NSA employee, now chairs IESG following her retirement, a move she claims eliminates potential conflicts [1]. Additionally, six current NSA employees supported the specification in the latest voting round, with Peter Yee simultaneously employed by both NSA and the Akayla consulting firm [1]. The TLS working group chair, Sean Turner, serves as "Treasurer, Secretary, and Security Officer" of Akayla [1]. The specification itself was authored by employees of Sandbox AQ, a company funded by the CIA [1].
The complainant filed a formal objection with the Internet Society (ISOC) in December 2025, which discussed the matter during its July 25–26, 2026 meeting [1].