(untitled)

In 2020, OpenSSL had a vulnerability in handling the signature_algorithms_cert extension. https:// openssl-library.org/news/secad v/20200421.txt Palo Alto apparently "solved" this in their IPS by blocking connections with "unknown" algs in signature_algorithms_cert. Six years later, we can't add ML-DSA to signature_algorithms_cert in Go. signature_algorithms_cert is dead. Sigh. Thanks to @ cks for…