2026.07.02 15:19:36 (Mastodon 116851053434090483, Twitter 2072701739489517832) from Daniel J. Bernstein:
Proponents of allowing solo PQ, a weakened version of ECC+PQ, have been posting various talking points recently to the IETF TLS mailing list. I've posted a quick guide to those talking points: https://nsa.2026.action.cr.yp.to/guide.html