Is ECDSA obsolete/deprecated? I have been reading about recommendations on the correct use of crypto as a developer and I read at least two references to the obsolescence (so to say) of ECDSA.


https://paragonie.com/blog/2015/08/you-wouldnt-base64-a-password-cryptography-decoded  
https://crypto.stackexchange.com/a/58382/63254


Is that it? Is ECDSA really obsolete/deprecated ?
Of course not. As long as it is used and - preferably - unbroken, the algorithm is still out there. Actually, it is used a lot in the smart card world and ECDSA certificates are still out there as well. Not all crypto libraries will probably support the newer curves either.

ECDSA is still secure when it is being used correctly. Sure, it is harder to secure but if it is used correctly then nothing short of a quantum computer can break it. It also has quite a few curves defined for it, so there are plenty of (stronger) key sizes allowed.

As far as I know, no standard defining ECDSA or build upon ECDSA has been redacted or withdrawn. You would expect that to happen if it would be considered obsolete / deprecated. If it is the best choice for new protocols is of course up to the designers - I'd probably prefer EdDSA for now.

And if MD5, RC4 and DES / two-key triple DES have taught us anything, it is that algorithms are being used even after they are broken and / or withdrawn. Unfortunately.