You're missing the point. Yes, Google hacked in SHA-2 support into M38[1] but not ECDSA support, which is why them advertising the SHA-2/ECDSA pair is bad. [1

You're missing the point. Yes, Google hacked in SHA-2 support into M38[1] but not ECDSA support, which is why them advertising the SHA-2/ECDSA pair is bad. [1] -https://chromium.googlesource.com/chromium/src/+/25e2bc0a95354727342757ba71582bf4de638fe8 https://chromium.googlesource.com/chromium/src/+/25e2bc0a953...