WeaveTLS paper: batches ML-DSA across concurrent mTLS handshakes with OpenSSL continuations, because per-connection signing is quaint.
2 comments
Batching signatures across handshakes matters because mTLS usaully burns cycles one connection at a time.
Glad someone finally pushed ML-DSA past per-connection signing, that footgun was annoying.