3 stories
Show: Summaries / Headlines only
Chrome blocked the six compromised TLS intermediates within two hours of the researcher's report. Linux distributions, language runtimes, and devices that ship their own root lists were still being patched four days later.
An ML-DSA-44 signature is 2,420 bytes, larger than many DNS implementations allow in one UDP packet. Cloudflare's engineers wrote that signing servers, registrars, registries, and the DNS root must all adopt the algorithm too.
Let's Encrypt said nothing changes today for its subscribers. It presented both dates as targets and wrote that the transition will take time, with standards and browser root programs still unsettled.
