From Dev.to
Hybrid signatures have a trap: one valid half is not enough
Strip one signer from a COSE_Sign envelope and the other still verifies. How a post-quantum hybrid (Ed25519 + ML-DSA-65) quietly becomes a single signature, and the two checks that stop it. Post-qua...