Fix for Chrome ERR_CONNECTION_RESET caused by ISP middleboxes rejecting large TLS 1.3 ClientHello with post-quantum ML-KEM key exchange. Solution: MSS clamping on OPNsense/pfSense.