Bernstein's Blog

Posted Dec 9, 2025 23:21 UTC (Tue) by mcatanzaro (subscriber, #93033)
In reply to: Bernstein's Blog by geofft
Parent article: Disagreements over post-quantum encryption for TLS

TLS 1.2 was a mess of ciphersuites. We learned from that. TLS 1.3 has only a few options. Turns out, fewer is better.