I'm sad about the state of support for ed25519/curve25519 crypto in TLS. If you could reasonably deploy a website that doesn't offer anything else for https, y

I'm sad about the state of support for ed25519/curve25519 crypto in TLS. If you could reasonably deploy a website that doesn't offer anything else for https, you'd instantly fix many session establishment-based CPU DoS attacks. It's multiple times faster than what you usually allow your server to negotiate.