In the transition period, clients are going to start proposing x25519mlkem768 key share in the client hello, but some servers wont be able to support it yet, resulting in an HRR and an additional round trip. The logical fix would be to send 2 key shares in the client hello, one for x25519mlkem768 and one for x25519. Could we add that support to picotls?
In the transition period, clients are going to start proposing x25519mlkem768 key share in the client hello, but some servers wont be able to support it yet, resulting in an HRR and an additional round trip. The logical fix would be to send 2 key shares in the client hello, one for x25519mlkem768 and one for x25519. Could we add that support to picotls?