Post #2635072

@phlogiston@mastodon.nz @nitrokey@social.nitrokey.com ML-DSA is supported by the protocol today via cryptographic agility, but RPs and authenticators need to catch up. If RPs update their servers to support and prefer ML-DSA then, whenever authenticators support ML-DSA, they will register PQ-safe keys. There is a separate issue of how to support upgrading authenticators that support both classical and PQ algorithms and have previously created a classical credential to use a new PQ cred. More discussion is needed there.