ML-DSA for Web Authentication

[simoneonofri]

fyi, @timcapalli (thanks!) found this draft ML-DSA for Web Authentication, @emlun is following up.

[martinthomson]

Great. That's clearly W3C/Fido territory. I doubt that the IETF will take it up, knowing that. If it gets adopted somewhere, it won't get past the IESG.

[selfissued]

I don't see that this draft achieves anything. https://datatracker.ietf.org/doc/draft-ietf-cose-dilithium/ already defines the COSE algorithm and registers it with IANA. Having an IANA-registered algorithm is all that's needed for WebAuthn and FIDO2 to use it.