Writing
Technical notes on post-quantum migration and AI agent safety, worked out to the byte.
ML-DSA certificate chains: the 184 bytes that break TLS handshakes
A three-certificate ML-DSA-65 chain comes to 16,568 bytes, and mbedTLS's default record buffer holds 16,384. The arithmetic byte by byte, why your CBOM won't flag it, and four fixes.
Read the note →