Your certificate chain is about to get heavy
An ML-DSA signature is not a drop-in for an ECDSA one — it is roughly an order of magnitude larger, and a chain carries several. Here is what that does to TLS handshake latency on a lossy mobile link, what it does to firmware images with a fixed signature slot, and the three places I have seen it break before anyone had a chance to plan for it.
...