draft-westerbaan-tls-keyshare-recommendations
Updated recommendations for TLS keyshares
This document recommends X25519MLKEM768 for use in TLS by updating
its entry in the TLS Supported Groups registry (previously EC Named
Curve Registry) to Recommended in the light of the future arrival of
cryptographically relevant quantum computers.
[[ NOTE I use key share in the title and here as it's more accurate
than "group" and perhaps more well known in the context TLS than key
agreement or key exchange. ]]